Vulnerability in Kaffe Openvm
CVE-2002-2022
Format string vulnerability in Kaffe OpenVM 1.0.6 and earlier allows local users to execute arbitrary code, when a java.lang.NoClassDefFoundError is thrown, via format specifiers in the forName attribute.
EPSS: 0.006 (46.6th percentile) — read the EPSS interpretation.
Affected products
- Kaffe Kaffe_openvm — versions 1.0.6
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, Exploit, x_refsource_VULN-DEV)