CVE-2002-1295

Published: Nov 29, 2002Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability."

Affected (1)

Products: Microsoft: Java Virtual Machine

1 product

Java Virtual Machine

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Java Virtual Machine	Version 1.1

References (10)

http://marc.info/?l=bugtraq&m=103682630823080&w=2

Source: cve@mitre.org

http://marc.info/?l=ntbugtraq&m=103684360031565&w=2

Source: cve@mitre.org

http://www.iss.net/security_center/static/10588.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/6136

Source: cve@mitre.org

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=103682630823080&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=ntbugtraq&m=103684360031565&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/10588.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/6136

Source: af854a3a-2127-422b-91ae-364da2661108

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.