CVE-2002-1294

The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows remote attackers to cause a denial of service (crash due to illegal memory accesses) and possibly conduct other unauthorized activities via an applet that uses those references to access proprietary Microsoft methods.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2002-11-29

Last modified

2024-08-08

Affected products

• Java Virtual Machine (Microsoft)

References

• http://marc.info/?l=bugtraq&m=103682630823080&w=2
• http://marc.info/?l=ntbugtraq&m=103684360031565&w=2
• http://www.iss.net/security_center/static/10587.php
• http://www.securityfocus.com/bid/6135