Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-1289

EPSS 6.46% · P91
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-1289

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read restricted process memory, cause a denial of service (crash), and possibly execute arbitrary code via the getNativeServices function, which creates an instance of the com.ms.awt.peer.INativeServices (INativeServices) class, whose methods do not verify the memory addresses that are passed as parameters.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft JVM INativeServices未授权内存访问漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft JVM是一款使用在Win32操作环境中的Java虚拟机系统，Microsoft JVM包含在大部分Windows版本中，也既包含在大部分Internet Explorer版本中。Microsoft JVM有的时候也可以通过独立下载获得。 Microsoft JVM INativeServices模式对参数检查不充分，远程攻击者可以利用这个漏洞传递非法内存地址而导致拒绝服务，或者信息泄露攻击。 任意applet可以通过调用SystemX.getNativeServices()来获得com
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-1289

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-1289

Please Login to view more intelligence information

Same Patch Batch · n/a · 2002-11-14 · 17 CVEs total

CVE-2002-1247KDE KIO子系统网络协议实现任意命令执行漏洞
CVE-2002-1276SquirrelMail global.php 跨站脚本漏洞
CVE-2002-1279MasqMail缓冲区溢出漏洞
CVE-2002-1281KDE KIO子系统网络协议实现任意命令执行漏洞
CVE-2002-1282KDE KIO子系统网络协议实现任意命令执行漏洞
CVE-2002-1283Novell Netware eMFrame iManage缓冲区溢出漏洞
CVE-2002-1285LPRNG runlpr本地权限提升漏洞
CVE-2002-1286Microsoft JVM URI解析漏洞
CVE-2002-1287Microsoft JVM类装载缓冲区溢出漏洞
CVE-2002-1288Microsoft JVM远程信息泄露漏洞
CVE-2002-1290Microsoft JVM未授权剪贴板访问漏洞
CVE-2002-1291Microsoft JVM Codebase信息泄露漏洞
CVE-2002-1292Microsoft JVM Package访问限制可绕过漏洞
CVE-2002-1293Microsoft JVM CAB文件装载漏洞
CVE-2002-1294Microsoft JVM HTML对象应用拒绝服务攻击漏洞
CVE-2002-1295Microsoft JVM HTML Applet标记类限制可绕过漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-1289

No comments yet

Leave a comment