CVE

Id
5676  
CVE No.
CVE-2002-1292  
Status
Candidate  
Description
The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running.  
Phase
Modified (20050510)  
Votes
ACCEPT(3) Cole, Green, Wall | NOOP(2) Christey, Cox  
Comments
Christey> Why is MS02-069 included here? This CAN is not mentioned in | the bulletin.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31259 5676 CVE-2002-1292 BUGTRAQ:20021108 Technical information about unpatched MS Java vulnerabilities  View
31260 5676 CVE-2002-1292 URL:http://marc.info/?l=bugtraq&m=103682630823080&w=2  View
31261 5676 CVE-2002-1292 NTBUGTRAQ:20021108 Technical information about unpatched MS Java vulnerabilities  View
31262 5676 CVE-2002-1292 URL:http://marc.info/?l=ntbugtraq&m=103684360031565&w=2  View
31263 5676 CVE-2002-1292 MS:MS02-069  View
31264 5676 CVE-2002-1292 URL:http://www.microsoft.com/technet/security/bulletin/ms02-069.asp  View
31265 5676 CVE-2002-1292 CERT-VN:VU#237777  View
31266 5676 CVE-2002-1292 URL:http://www.kb.cert.org/vuls/id/237777  View
31267 5676 CVE-2002-1292 BID:6133  View
31268 5676 CVE-2002-1292 URL:http://www.securityfocus.com/bid/6133  View
31269 5676 CVE-2002-1292 XF:msvm-ssm-restriction-bypass(10585)  View

Related JVN