CVE-2002-2284 Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.
MediumCVSS 6.4
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netscape communicator | = 4.0 | No fix listed |
| netscape communicator | = 4.5 | No fix listed |
| netscape communicator | = 4.6 | No fix listed |
| netscape communicator | = 4.7 | No fix listed |
| netscape communicator | = 4.51 | No fix listed |
| netscape communicator | = 4.61 | No fix listed |
| netscape communicator | = 4.72 | No fix listed |
| netscape communicator | = 4.73 | No fix listed |
| netscape communicator | = 4.74 | No fix listed |
| netscape communicator | = 4.75 | No fix listed |
| netscape communicator | = 4.76 | No fix listed |
| netscape communicator | = 4.77 | No fix listed |
| netscape communicator | = 4.78 | No fix listed |
| netscape communicator | = 4.79 | No fix listed |
References
- 20021121 [LSD] Java and JVM security vulnerabilities mailing-list
- www.lsd-pl.net
- 6223 vdb-entry
- netscape-java-insecure-classes(10714) vdb-entry