CVE-2002-2022 Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java.lang.NoClassDefFoundError is thrown, via format specifiers in the forName attrib...
HighCVSS 7.2
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java.lang.NoClassDefFoundError is thrown, via format specifiers in the forName attribute.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kaffe openvm | = 1.0.6 | No fix listed |
References
- 20020305 Latest Kaffe Java Virtual Machine Format Strings issue. exploit mailing-list
- openvm-class-format-strings(8399) vdb-entry
- 4249 vdb-entry