Unscored CVE-2002-2022 EUVD-2002-2001GHSA-9f96-5cpf-pvw6

Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java.lang.NoClassDefFoun…

Published Jul 14, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java.lang.NoClassDefFoundError is thrown, via format specifiers in the forName attribute.

References

openvm-class-format-strings(8399) vdb-entry
4249 vdb-entry
20020305 Latest Kaffe Java Virtual Machine Format Strings issue. mailing-list