CVE-2002-1289

CVE-2002-1289 describes a critical vulnerability in the Microsoft Java implementation, specifically within Internet Explorer, allowing remote attackers to exploit the getNativeServices function. This flaw enables unauthorized reading of restricted process memory, denial of service through application crashes, and potentially arbitrary code execution due to the INativeServices class failing to validate memory addresses passed as parameters. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), it indicates high severity with low attack complexity, requiring no authentication, and impacting confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.