Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-1293

EPSS 2.52% · P86
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-1293

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft JVM CAB文件装载漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft JVM是一款使用在Win32操作环境中的Java虚拟机系统，Microsoft JVM包含在大部分Windows版本中，也既包含在大部分Internet Explorer版本中。Microsoft JVM有的时候也可以通过独立下载获得。 Microsoft JVM使用的类 com.ms.vm.loader.CabCracker包含public模式允许CAB存档从硬盘装载，远程攻击者利用这个漏洞可以构建任意applet可以获取本地.CAB存档。 CabCracker类的load()模式用
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-1293

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-1293

请登录查看更多情报信息。

Same Patch Batch · n/a · 2002-11-14 · 17 CVEs total

CVE-2002-1247KDE KIO子系统网络协议实现任意命令执行漏洞
CVE-2002-1276SquirrelMail global.php 跨站脚本漏洞
CVE-2002-1279MasqMail缓冲区溢出漏洞
CVE-2002-1281KDE KIO子系统网络协议实现任意命令执行漏洞
CVE-2002-1282KDE KIO子系统网络协议实现任意命令执行漏洞
CVE-2002-1283Novell Netware eMFrame iManage缓冲区溢出漏洞
CVE-2002-1285LPRNG runlpr本地权限提升漏洞
CVE-2002-1286Microsoft JVM URI解析漏洞
CVE-2002-1287Microsoft JVM类装载缓冲区溢出漏洞
CVE-2002-1288Microsoft JVM远程信息泄露漏洞
CVE-2002-1289Microsoft JVM INativeServices未授权内存访问漏洞
CVE-2002-1290Microsoft JVM未授权剪贴板访问漏洞
CVE-2002-1291Microsoft JVM Codebase信息泄露漏洞
CVE-2002-1292Microsoft JVM Package访问限制可绕过漏洞
CVE-2002-1294Microsoft JVM HTML对象应用拒绝服务攻击漏洞
CVE-2002-1295Microsoft JVM HTML Applet标记类限制可绕过漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-1293

No comments yet

Leave a comment