Vulnerability Details CVE-2002-2248
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.049
EPSS Ranking 89.0%
CVSS Severity
CVSS v2 Score 10.0
Products affected by CVE-2002-2248
-
cpe:2.3:a:netscape:communicator:4.0
-
cpe:2.3:a:netscape:communicator:4.5
-
cpe:2.3:a:netscape:communicator:4.51
-
cpe:2.3:a:netscape:communicator:4.6
-
cpe:2.3:a:netscape:communicator:4.61
-
cpe:2.3:a:netscape:communicator:4.7
-
cpe:2.3:a:netscape:communicator:4.72
-
cpe:2.3:a:netscape:communicator:4.73
-
cpe:2.3:a:netscape:communicator:4.74
-
cpe:2.3:a:netscape:communicator:4.75
-
cpe:2.3:a:netscape:communicator:4.76
-
cpe:2.3:a:netscape:communicator:4.77
-
cpe:2.3:a:netscape:communicator:4.78
-
cpe:2.3:a:netscape:communicator:4.79