CVE-2002-1310 : Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI han

Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in Macromedia JRun 4.0 and earlier allows remote attackers to execute arbitrary via an HTTP GET request with a long .jsp file name.

Published 2002-11-29 05:00:00

Updated 2017-07-11 01:29:14

Source MITRE

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2002-1310

Macromedia » Jrun
Versions up to, including, (<=) 4.0
cpe:2.3:a:macromedia:jrun:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2002-1310

EPSS FAQ

0.72%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 80 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2002-1310

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2002-1310

Jump to

Vulnerability Details : CVE-2002-1310

Products affected by CVE-2002-1310

Exploit prediction scoring system (EPSS) score for CVE-2002-1310

CVSS scores for CVE-2002-1310

References for CVE-2002-1310