CVE-1999-0142 Security feature bypass in n/a

High 7.5 Published 2 Jun 2000 Updated 1 Aug 2024

An applet can bypass security restrictions to connect to arbitrary hosts, requiring user interaction to load the malicious applet.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-1999-0142?

CVE-1999-0142 is a high-severity vulnerability in n/a, published on 2 Jun 2000. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.

Which versions are affected by CVE-1999-0142?

It affects 2 products.

Products include Netscape Navigator, Sun Java.

How do I fix CVE-1999-0142?

No fix has been published for CVE-1999-0142 yet. Limit exposure of the affected software until one is available.

Is CVE-1999-0142 being exploited?

There is no known exploitation of CVE-1999-0142 in the wild and no public exploit code.

Sources

Also known as GHSA-3h3c-vjf9-4r2r.