Vulnerability Details : CVE-2002-1292
The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running.
Vulnerability category: Denial of service
Exploit prediction scoring system (EPSS) score for CVE-2002-1292
Probability of exploitation activity in the next 30 days: 1.58%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 86 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2002-1292
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
References for CVE-2002-1292
- http://marc.info/?l=bugtraq&m=103682630823080&w=2
-
http://www.kb.cert.org/vuls/id/237777
US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/10585
- http://marc.info/?l=ntbugtraq&m=103684360031565&w=2
-
http://www.securityfocus.com/bid/6133
Products affected by CVE-2002-1292
- cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*