CVE-2002-0866
First published: Fri Oct 11 2002(Updated: )
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Java Virtual Machine | =3100 | |
| Microsoft Java Virtual Machine | =3805 | |
| Microsoft Java Virtual Machine | =3188 | |
| Microsoft Java Virtual Machine | =3200 | |
| Microsoft Java Virtual Machine | =3300 | |
| Microsoft Java Virtual Machine | =3802 | |
| Microsoft Java Virtual Machine | =2000 | |
| Microsoft Java Virtual Machine | =3000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2002-0866?
CVE-2002-0866 is considered a high severity vulnerability due to its ability to allow remote attackers to execute arbitrary code via DLL injection.
How do I fix CVE-2002-0866?
To mitigate CVE-2002-0866, users should upgrade to a version of Microsoft Virtual Machine that is not vulnerable, ideally above 5.0.3805.
What systems are affected by CVE-2002-0866?
CVE-2002-0866 affects multiple versions of Microsoft Virtual Machine, including 2000, 3000, 3100, 3188, 3200, 3300, 3802, and 3805.
Can CVE-2002-0866 be exploited without user interaction?
Yes, CVE-2002-0866 can be exploited remotely through Java applets without requiring user interaction.
What types of attacks are possible with CVE-2002-0866?
CVE-2002-0866 allows attackers to load and execute malicious DLL files on a victim's system, potentially leading to full system compromise.
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/remedy
- agent/references
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft java virtual machine
- version/microsoft java virtual machine/3100
- version/microsoft java virtual machine/3805
- version/microsoft java virtual machine/3188
- version/microsoft java virtual machine/3200
- version/microsoft java virtual machine/3300
- version/microsoft java virtual machine/3802
- version/microsoft java virtual machine/2000
- version/microsoft java virtual machine/3000