Every CVESearch/Get API key

CVE-2002-1287

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer,...

5.0 Medium

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.

Exploit likelihood

20.2%Up 6.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.0

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.

Record
CVE-2002-1287
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE ListNo score

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.

Record
CVE-2002-1287
Updated
2026-11-02
EUVDEUVD-2002-1271No score

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.

Record
EUVD-2002-1271
Updated
2026-11-03
GitHub AdvisoriesGHSA-2jp2-c8rx-5w8jNo score

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer,...

Stack-based buffer overflow in the Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to cause a denial of service via a long class name through (1) Class.forName or (2) ClassLoader.loadClass.

Record
GHSA-2jp2-c8rx-5w8j
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-1287 is a medium vulnerability (CVSS 5.0) in Microsoft Java Virtual Machine, published November 14, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 20.2%, the 97th percentile. No source names a fixed version.

References

MoveEnter Open