CVE-2002-2281 Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correc...
HighCVSS 10.0
EPSS 10.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec java | = 4.0 | No fix listed |
| symantec java | = 4.4 | No fix listed |
| symantec java | = 4.5 | No fix listed |
| symantec java | = 4.06 | No fix listed |
| symantec java | = 4.6 | No fix listed |
| symantec java | = 4.07 | No fix listed |
| symantec java | = 4.7 | No fix listed |
| symantec java | = 4.08 | No fix listed |
| symantec java | = 4.51 | No fix listed |
| symantec java | = 4.61 | No fix listed |
| symantec java | = 4.72 | No fix listed |
| symantec java | = 4.73 | No fix listed |
| symantec java | = 4.74 | No fix listed |
| symantec java | = 4.75 | No fix listed |
| symantec java | = 4.76 | No fix listed |
| symantec java | = 4.77 | No fix listed |
| symantec java | = 4.78 | No fix listed |
| symantec java | = 4.79 | No fix listed |
References
- 20021121 [LSD] Java and JVM security vulnerabilities mailing-list
- www.lsd-pl.net
- 6222 exploit vdb-entry
- symantec-jit-bypass-security(10711) vdb-entry