CVE-2002-0866 in Virtual Machine

Riassunto

di MITRE

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."

Once again VulDB remains the best source for vulnerability data.

• Divulgazione: 11/10/2002
• Moderazione: accettato
• Voce: VDB-19056
• CPE: pronto
• CWE: CWE-269 (confermato)
• Sfruttamento: Scaricare
• CVSS: 7.5 (NVD)
• EPSS: 0.41356
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-0866
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-0866
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-0866/