CVSS: 7.5EPSS: 0%CPEs: 17EXPL: 0CVE-2002-0076
https://notcve.org/view.php?id=CVE-2002-0076
Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability. El verificador de bytecode del "Java Runtime Enviroment" (entorno de ejecución de java), permite que atacantes remotos se salten la "sandbox" (caja de arena) de Java y ejecuten comandos a través de un applet que tiene una conversión de tipo ilegal. Ésto se ha comprobado en (1) la máquina virtual de Microsoft (3802 y anteriores) que se usa en el MS Internet Explorer 4.x y 5.x, (2) Netscape 6.2.1 y anteriores y posiblmente en otras implementaciones que usan versiones vulnerables del SDK o JDK. Este vulnerabilidad es una variante de aquella conocida como vulnerabilidad en "Verificador de la Máquina Virtual". • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/218 http://www.iss.net/security_center/static/8480.php http://www.securityfocus.com/bid/4313 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013 •
CVSS: 5.0EPSS: 0%CPEs: 11EXPL: 0CVE-2002-0058
https://notcve.org/view.php?id=CVE-2002-0058
Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK. Esta vulnerabilidad en el "Java Runtime Enviroment" (entorno de ejecución de Java, JRE), permite que sitios web maliciosos husmeen las sesiones de los clientes web, a través de un applet de Java que redirige la sesión a otros servidor. Esto se ha visto en (1)versiones de Netscape 6.0 hasta 6.1 y las anteriores a la 4.79, (2) Máquina Virtual de Microsoft (build 3802 y anteriores) usada en Internet Explorer 4.x y 5.x, y posiblemente otras implementaciones que usan versiones vulnerables de SDK y JDK. • http://marc.info/?l=bugtraq&m=101534535304228&w=2 http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/216 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-013 •
CVSS: 7.5EPSS: 3%CPEs: 18EXPL: 2CVE-2000-0711 – Sun JDK 1.1.x / Sun JRE 1.1.x - Listening Socket
https://notcve.org/view.php?id=CVE-2000-0711
Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice. • https://www.exploit-db.com/exploits/20139 http://www.cert.org/advisories/CA-2000-15.html http://www.securityfocus.com/bid/1545 http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000805020429.11774.qmail%40securityfocus.com http://www.securityfocus.com/templates/archive.pike?list=1&msg=3999922128E.EE84TAKAGI%40java-house.etl.go.jp •
CVSS: 2.6EPSS: 0%CPEs: 2EXPL: 1CVE-2000-0132 – Microsoft Virtual Machine 2000 - Series/3000 Series getSystemResource
https://notcve.org/view.php?id=CVE-2000-0132
Microsoft Java Virtual Machine allows remote attackers to read files via the getSystemResourceAsStream function. • https://www.exploit-db.com/exploits/19734 http://www.securityfocus.com/bid/957 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-1999-0766
https://notcve.org/view.php?id=CVE-1999-0766
The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment. • http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ240346 http://www.securityfocus.com/bid/600 https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-031 • CWE-16: Configuration •