GCVE - cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*

part: a version: 1.1 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Java Virtual Machine (`365132df-754b-5ea5-846f-8f8ac8ab4244`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2002-1295`	vulnerable	2026-06-08 04:46:23.359783	Details available The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service (crash) and possibly conduct other unauthorized activities via applet tags in HTML that bypass Java class restrictions (such as private constructors) by providing the class name in the code parameter, aka "Incomplete Java Object Instantiation Vulnerability." Published: 2002-11-14T05:00:00.000Z Updated: 2024-08-08T03:19:28.835Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/6136 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069 http://marc.info/?l=ntbugtraq&m=103684360031565&w=2 http://www.iss.net/security_center/static/10588.php http://marc.info/?l=bugtraq&m=103682630823080&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1294`	vulnerable	2026-06-08 04:46:23.359491	Details available The Microsoft Java implementation, as used in Internet Explorer, can provide HTML object references to applets via Javascript, which allows remote attackers to cause a denial of service (crash due to illegal memory accesses) and possibly conduct other unauthorized activities via an applet that uses those references to access proprietary Microsoft methods. Published: 2002-11-14T05:00:00.000Z Updated: 2024-08-08T03:19:28.473Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/10587.php http://marc.info/?l=ntbugtraq&m=103684360031565&w=2 http://www.securityfocus.com/bid/6135 http://marc.info/?l=bugtraq&m=103682630823080&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1293`	vulnerable	2026-06-08 04:46:23.359243	Details available The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method. Published: 2002-11-14T05:00:00.000Z Updated: 2024-08-08T03:19:28.386Z Open on db.gcve.eu Reference links http://marc.info/?l=ntbugtraq&m=103684360031565&w=2 http://www.iss.net/security_center/static/10586.php http://www.securityfocus.com/bid/6137 http://marc.info/?l=bugtraq&m=103682630823080&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1292`	vulnerable	2026-06-08 04:46:23.359006	Details available The Microsoft Java virtual machine (VM) build 5.0.3805 and earlier, as used in Internet Explorer, allows remote attackers to extend the Standard Security Manager (SSM) class (com.ms.security.StandardSecurityManager) and bypass intended StandardSecurityManager restrictions by modifying the (1) deniedDefinitionPackages or (2) deniedAccessPackages settings, causing a denial of service by adding Java applets to the list of applets that are prevented from running. Published: 2002-11-14T05:00:00.000Z Updated: 2024-08-08T03:19:28.809Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/10585 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-069 http://www.securityfocus.com/bid/6133 http://marc.info/?l=ntbugtraq&m=103684360031565&w=2 http://www.kb.cert.org/vuls/id/237777	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1291`	vulnerable	2026-06-08 04:46:23.358739	Details available The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" (null character) URL. Published: 2002-11-14T05:00:00.000Z Updated: 2024-08-08T03:19:28.613Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/10584.php http://marc.info/?l=ntbugtraq&m=103684360031565&w=2 http://www.securityfocus.com/bid/6138 http://marc.info/?l=bugtraq&m=103682630823080&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1290`	vulnerable	2026-06-08 04:46:23.358495	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1289`	vulnerable	2026-06-08 04:46:23.358247	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1288`	vulnerable	2026-06-08 04:46:23.357977	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1287`	vulnerable	2026-06-08 04:46:23.357706	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1286`	vulnerable	2026-06-08 04:46:23.357357	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.