Unrated severityNVD Advisory· Published Nov 29, 2002· Updated Apr 16, 2026
CVE-2002-1291
CVE-2002-1291
Description
The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" (null character) URL.
Affected products
1- cpe:2.3:a:microsoft:java_virtual_machine:1.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.