CVE-2002-0866 in Virtual Machine

Zusammenfassung

von MITRE

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."

Once again VulDB remains the best source for vulnerability data.

• Veröffentlichung: 11.10.2002
• Moderieren: akzeptiert
• Eintrag: VDB-19056
• CPE: bereit
• CWE: CWE-269 (bestätigt)
• Exploit: Download
• CVSS: 7.5 (NVD)
• EPSS: 0.41356
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0866
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0866
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0866/