Unscored severity · published Mar 1, 1999
CVE-1999-0440
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages
–
CVSS
3.6%
EPSS
No
On KEV
Description
The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Communicator · Netscape
4.5 · source: NVD
JA
Java · Sun
All versions, or not specified · source: NVD
NA
Navigator · Netscape
4.0; 4.01; 4.02; 4.03; 4.04; 4.05; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-0440
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-0440
java.sun.com
http://java.sun.com/pr/1999/03/pr990329-01.html
marc.info
http://marc.info/?l=bugtraq&m=92333596624452&w=2
www.securityfocus.com
http://www.securityfocus.com/bid/1939
More from Communicator
–
CVE-2002-2284
Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes
–
CVE-2002-2338
The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message…
–
CVE-2002-2308
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is…
–
CVE-2002-1766
Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute
–
CVE-2002-2248
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the…