CVE-2002-2248 Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset....
HighCVSS 10.0
EPSS 5.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | = 4.0 | No fix listed |
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.7 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
| netscape communicator | = 4.73 | No fix listed |
| netscape communicator | = 4.74 | No fix listed |
| netscape communicator | = 4.75 | No fix listed |
| netscape communicator | = 4.76 | No fix listed |
| netscape communicator | = 4.77 | No fix listed |
| netscape communicator | = 4.78 | No fix listed |
| netscape communicator | = 4.79 | No fix listed |
References
- 20021126 Netscape 4 Java buffer overflow mailing-list
- 6256 vdb-entry
- netscape-applet-canconvert-bo(10706) vdb-entry