Microsoft JVM CAB File Loading Vulnerability

Bugtraq ID:	6137
Class:	Access Validation Error
CVE:	CVE-2002-1293
Remote:	Yes
Local:	No
Published:	Nov 08 2002 12:00AM
Updated:	Jul 11 2009 06:07PM
Credit:	Discovered by Jouko Pynnonen <[email protected]>.
Vulnerable:	Microsoft JVM 1.1 + Microsoft Internet Explorer 5.0.1 SP2 + Microsoft Internet Explorer 5.0.1 SP2 + Microsoft Internet Explorer 5.0.1 SP1 + Microsoft Internet Explorer 5.0.1 SP1 + Microsoft Internet Explorer 5.0.1 for Windows NT 4.0 + Microsoft Internet Explorer 5.0.1 for Windows NT 4.0 + Microsoft Internet Explorer 5.0.1 for Windows 98 + Microsoft Internet Explorer 5.0.1 for Windows 98 + Microsoft Internet Explorer 5.0.1 for Windows 95 + Microsoft Internet Explorer 5.0.1 for Windows 95 + Microsoft Internet Explorer 5.0.1 for Windows 2000 + Microsoft Internet Explorer 5.0.1 for Windows 2000 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 6.0 SP1 + Microsoft Internet Explorer 6.0 SP1 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 6.0 + Microsoft Internet Explorer 5.5 SP2 + Microsoft Internet Explorer 5.5 SP2 + Microsoft Internet Explorer 5.5 SP1 + Microsoft Internet Explorer 5.5 SP1 + Microsoft Internet Explorer 5.5 preview + Microsoft Internet Explorer 5.5 preview + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.0 for Windows NT 4 + Microsoft Internet Explorer 5.0 for Windows NT 4 + Microsoft Internet Explorer 5.0 for Windows 98 + Microsoft Internet Explorer 5.0 for Windows 98 + Microsoft Internet Explorer 5.0 for Windows 95 + Microsoft Internet Explorer 5.0 for Windows 95 + Microsoft Internet Explorer 5.0 for Windows 2000 + Microsoft Internet Explorer 5.0 for Windows 2000 + Microsoft Internet Explorer 5.0 + Microsoft Internet Explorer 5.0
Not Vulnerable:

Microsoft JVM CAB File Loading Vulnerability

Microsoft JVM uses a class named com.ms.vm.loader.CabCracker, which contains a public method that allows CAB archives to be loaded from the hard disk. Since the method is public, any applet can call this method and bypass any security checks that would normally be in place.

This vulnerability was originally reported in BID 5670.

Microsoft JVM CAB File Loading Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft JVM CAB File Loading Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft JVM CAB File Loading Vulnerability

References:

• Technical information about unpatched MS Java vulnerabilities (Jouko Pynnonen )