Lucene search
HistoryOct 18, 2007 - 10:00 a.m.
CVE-2002-2281
symantec
java
jit
compiler
netscape
communicator
remote code execution
cve-2002-2281
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
Affected configurations
Node
symantecjavaMatch4.0
ORsymantecjavaMatch4.4
ORsymantecjavaMatch4.5
ORsymantecjavaMatch4.06
ORsymantecjavaMatch4.6
ORsymantecjavaMatch4.07
ORsymantecjavaMatch4.7
ORsymantecjavaMatch4.08
ORsymantecjavaMatch4.51
ORsymantecjavaMatch4.61
ORsymantecjavaMatch4.72
ORsymantecjavaMatch4.73
ORsymantecjavaMatch4.74
ORsymantecjavaMatch4.75
ORsymantecjavaMatch4.76
ORsymantecjavaMatch4.77
ORsymantecjavaMatch4.78
ORsymantecjavaMatch4.79
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.1 High
AI Score
Confidence
High
0.05 Low
EPSS
Percentile
92.9%
Related for CVE-2002-2281