CVE-2002-0866 Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that...
HighCVSS 7.5
EPSS 41.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft virtual machine | = 2000 | No fix listed |
| Microsoft virtual machine | = 3000 | No fix listed |
| Microsoft virtual machine | = 3100 | No fix listed |
| Microsoft virtual machine | = 3188 | No fix listed |
| Microsoft virtual machine | = 3200 | No fix listed |
| Microsoft virtual machine | = 3300 | No fix listed |
| Microsoft virtual machine | = 3802 | No fix listed |
| Microsoft virtual machine | = 3805 | No fix listed |
References
- 20020923 Technical information about the vulnerabilities fixed by MS-02-52 mailing-list
- msvm-jdbc-dll-execution(10133) patch vdb-entry vendor-advisory
- VU#307306 third-party-advisory us-government-resource
- 5751 vdb-entry
- MS02-052 vendor-advisory