Unscored severity · published Oct 11, 2002
CVE-2002-0866
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries)…
–
CVSS
41.4%
EPSS
No
On KEV
Description
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."
Exploitation
Is it being used?
Exploit prediction (EPSS)41.4% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
Virtual Machine · Microsoft
2000; 3000; 3100; 3188; 3200; 3300; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0866
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0866
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html
Patch
http://www.iss.net/security_center/static/10133.php
Third Party Advisory
http://www.kb.cert.org/vuls/id/307306
www.securityfocus.com
http://www.securityfocus.com/bid/5751
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052
More from Virtual Machine
–
CVE-2003-0111
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security…
–
CVE-2002-0865
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe…
–
CVE-2002-0867
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a…
–
CVE-2002-0979
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to…
–
CVE-2002-0076
Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as…