Java Implementation Vulnerability in Internet Explorer by Microsoft

CVE-2002-1288

What is CVE-2002-1288?

The Java implementation provided by Microsoft, when used in Internet Explorer, contains a vulnerability that enables remote attackers to exploit the getAbsolutePath() method within a File() call. This can allow the malicious individuals to determine the current working directory of the Internet Explorer process. Such exposure might lead to more significant attacks if combined with other vulnerabilities, demonstrating the importance of managing and patching Java components within applications.

References