← Database

CVE-2002-1291

MEDIUM CVSS: 5.0 Published: 2002-11-29 Modified: 2026-06-16

Description

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" (null character) URL.

Affected Platforms

Microsoft Java Virtual Machine

Weakness Type

NVD-CWE-Other

References