7.5

CVE-2002-1308

Heap-based buffer overflow in Netscape and Mozilla allows remote attackers to execute arbitrary code via a jar: URL that references a malformed .jar file, which overflows a buffer during decompression.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Mozilla Version0.9.6
Mozilla ≫ Mozilla Version0.9.7
Mozilla ≫ Mozilla Version0.9.8
Mozilla ≫ Mozilla Version0.9.9
Mozilla ≫ Mozilla Version1.0
Mozilla ≫ Mozilla Version1.0.1
Mozilla ≫ Mozilla Version1.1
Netscape ≫ Navigator Version6.2
Netscape ≫ Navigator Version6.2.1
Netscape ≫ Navigator Version6.2.2
Netscape ≫ Navigator Version6.2.3
Netscape ≫ Navigator Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.24% 0.905
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P