First published: Tue Dec 31 2002(Updated: )
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Java | =4.75 | |
Symantec Java | =4.08 | |
Symantec Java | =4.72 | |
Symantec Java | =4.06 | |
Symantec Java | =4.78 | |
Symantec Java | =4.5 | |
Symantec Java | =4.07 | |
Symantec Java | =4.61 | |
Symantec Java | =4.77 | |
Symantec Java | =4.7 | |
Symantec Java | =4.0 | |
Symantec Java | =4.74 | |
Symantec Java | =4.6 | |
Symantec Java | =4.4 | |
Symantec Java | =4.51 | |
Symantec Java | =4.76 | |
Symantec Java | =4.73 | |
Symantec Java | =4.79 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2281 has a severity rating of medium due to its potential for remote code execution.
To fix CVE-2002-2281, you should upgrade to a patched version of the Symantec Java software that addresses this vulnerability.
CVE-2002-2281 affects multiple versions of Symantec Java, including 4.0 through 4.79.
Yes, CVE-2002-2281 can be exploited remotely by attackers through a malicious applet.
CVE-2002-2281 can facilitate remote code execution attacks that allow attackers to execute arbitrary Java commands.