Lucene search
HistoryOct 14, 2007 - 8:00 p.m.
CVE-2002-2248
cve-2002-2248
buffer overflow
java
remote code execution
nvd
8.4 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.036 Low
EPSS
Percentile
91.7%
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
Affected configurations
Node
netscapecommunicatorMatch4.0
ORnetscapecommunicatorMatch4.5
ORnetscapecommunicatorMatch4.6
ORnetscapecommunicatorMatch4.7
ORnetscapecommunicatorMatch4.51
ORnetscapecommunicatorMatch4.61
ORnetscapecommunicatorMatch4.72
ORnetscapecommunicatorMatch4.73
ORnetscapecommunicatorMatch4.74
ORnetscapecommunicatorMatch4.75
ORnetscapecommunicatorMatch4.76
ORnetscapecommunicatorMatch4.77
ORnetscapecommunicatorMatch4.78
ORnetscapecommunicatorMatch4.79
8.4 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.036 Low
EPSS
Percentile
91.7%
Related for CVE-2002-2248