Sun Openwindows vulnerabilities

2 CVEs affecting Sun Openwindows, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2002-1588, published 2002-11-29.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2002-1588, published 2002-11-29. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.
• CVE-1999-1584, published 1999-12-31. High severity, CVSS 10.0. EPSS: 1.4% chance of exploitation in the next 30 days. Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows 3.0, allows local users to gain root…