Security Flaw in Microsoft Java Virtual Machine for Internet Explorer

CVE-2002-1292

Summary

The Microsoft Java Virtual Machine utilized in Internet Explorer up to version 5.0.3805 is susceptible to a security flaw that enables remote attackers to manipulate the Standard Security Manager (SSM) class settings. By altering the 'deniedDefinitionPackages' or 'deniedAccessPackages' configurations, attackers can bypass security restrictions, potentially leading to denial of service as malicious Java applets may be improperly approved for execution. This flaw emphasizes the importance of updating vulnerable products to maintain security integrity.

References