Description
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
References
- netscape-applet-canconvert-bo(10706) vdb-entry
- 20021126 Netscape 4 Java buffer overflow mailing-list
- 6256 vdb-entry