CVE-2002-2248 in Communicator

Summary

Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 10/14/2007
• Disclosure: 12/31/2002
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 10.0
• EPSS: 0.04871
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-2248
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-2248
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-2248/