CVE-2002-2248

CVE-2002-2248 describes a critical buffer overflow vulnerability in the sun.awt.windows.WDefaultFontCharset Java class within Netscape 4.0. This flaw allows remote attackers to execute arbitrary code by crafting a malicious applet that passes an overly long string to the WDefaultFontCharset constructor and then calls the canConvert method. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication and having low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. The attack vector is network-based, making it remotely exploitable. Despite its high severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also absent, indicating a lack of current attention.