CVE:CVE-2002-2248
CNNVD:CNNVD-200212-227
Netscape 4.0版本中的sun.awt.windows.WDefaultFontCharset Java类实现存在缓冲区溢出漏洞。远程攻击者可以通过调用具有超长字符的WDefaultFontCharset构造函数和调用canConvert方法的程序执行任意代码。
solution:Upgrade netscape communicator to a higher version than 4.0,4.5,4.6,4.7,4.51,4.61,4.72,4.73,4.74,4.75,4.76,4.77,4.78,4.79,and avoid the version 4.0,4.5,4.6,4.7,4.51,4.61,4.72,4.73,4.74,4.75,4.76,4.77,4.78,4.79