CVE-2002-1286

The CVE-2002-1286 issue affects the Microsoft Java implementation used by Internet Explorer. The underlying vulnerability is improper parsing of URLs whose domain portion contains a colon, allowing a remote attacker to load a Java applet from a malicious site within the security context of the si...

CVE-2002-1295

The CVE-2002-1295 entry concerns the Microsoft Java VM used by Internet Explorer. The vulnerability arises when HTML applet tags bypass Java class restriction checks by supplying the class name in the code parameter, allowing remote attackers to cause a crash (denial of service) and potentially p...

CVE-2002-1292

The CVE-2002-1292 entry concerns the Microsoft Java VM (MSJVM) in Internet Explorer up to build 5.0.3805. A vulnerability allows remote attackers to extend the Standard Security Manager (com.ms.security.StandardSecurityManager) by modifying deniedDefinitionPackages or deniedAccessPackages, leadin...

CVE-2002-1289

The CVE-2002-1289 entry concerns the Microsoft Java implementation used in Internet Explorer. The vulnerability arises in getNativeServices, which creates an instance of com.ms.awt.peer.INativeServices (INativeServices) and does not verify the memory addresses passed to its methods, allowing remo...

CVE-2002-1293

The CVE concerns the Microsoft Java implementation used in Internet Explorer. A public load0() method in the CabCracker class (com.ms.vm.loader.CabCracker) allows remote attackers to bypass security checks performed by load(), enabling potential bypass of authentication/validation logic. The vuln...

CVE-2002-1294

CVE-2002-1294 affects the Microsoft Java implementation used by Internet Explorer. The vulnerability arises when HTML object references to applets are exposed via JavaScript, allowing a remote attacker to cause a denial-of-service crash (illegal memory accesses) and potentially perform other unau...