← Database

CVE-2002-2248

CRITICAL CVSS: 10.0 Published: 2002-12-31 Modified: 2026-06-16

Description

Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.

Affected Platforms

Netscape Communicator

Weakness Type

CWE-119

References