Microsoft JVM Class Loader Buffer Overrun Vulnerability
BID:6134
Info
Microsoft JVM Class Loader Buffer Overrun Vulnerability
| Bugtraq ID: | 6134 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-1287 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2002 12:00AM |
| Updated: | Jul 11 2009 06:07PM |
| Credit: | Discovered by Jouko Pynnonen <[email protected]>. |
| Vulnerable: |
Microsoft JVM 1.1 |
| Not Vulnerable: | |
Discussion
Microsoft JVM Class Loader Buffer Overrun Vulnerability
Details of a vulnerability in Microsoft JVM have been published. According to the report, a buffer overrun condition is present in the class loader. It may be triggered by attempting to load a class with a name of excessive length. At the very least, attackers may crash victim browsers when the condition occurs. It is not confirmed whether attackers can exploit this vulnerability to execute instructions on target hosts.
This vulnerability was originally reported in BID 5670.
Details of a vulnerability in Microsoft JVM have been published. According to the report, a buffer overrun condition is present in the class loader. It may be triggered by attempting to load a class with a name of excessive length. At the very least, attackers may crash victim browsers when the condition occurs. It is not confirmed whether attackers can exploit this vulnerability to execute instructions on target hosts.
This vulnerability was originally reported in BID 5670.
Solution / Fix
Microsoft JVM Class Loader Buffer Overrun Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.