CVE-2002-2281: Critical severity Symantec Java vulnerability
Published Dec 31, 2002
·Updated
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
Affected Software
18 affected components
Symantec Java=4.75
Symantec Java=4.08
Symantec Java=4.72
Symantec Java=4.06
Symantec Java=4.78
Symantec Java=4.5
Symantec Java=4.07
Symantec Java=4.61
Symantec Java=4.77
Symantec Java=4.7
Symantec Java=4.0
Symantec Java=4.74
Symantec Java=4.6
Symantec Java=4.4
Symantec Java=4.51
Symantec Java=4.76
Symantec Java=4.73
Symantec Java=4.79
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Oct 18, 2007
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-2281?
CVE-2002-2281 has a severity rating of medium due to its potential for remote code execution.
2
How do I fix CVE-2002-2281?
To fix CVE-2002-2281, you should upgrade to a patched version of the Symantec Java software that addresses this vulnerability.
3
What versions are affected by CVE-2002-2281?
CVE-2002-2281 affects multiple versions of Symantec Java, including 4.0 through 4.79.
4
Can CVE-2002-2281 be exploited remotely?
Yes, CVE-2002-2281 can be exploited remotely by attackers through a malicious applet.
5
What types of attacks can CVE-2002-2281 facilitate?
CVE-2002-2281 can facilitate remote code execution attacks that allow attackers to execute arbitrary Java commands.