VDB

CVE-2002-0866

CVE-2002-0866 PUBLISHED CVSS 7.5 HIGH

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."

EPSS 40.56% · 97.4th percentile

Risk Scores

CVSS 2.0
7.5
EPSS Score
40.56%
97.4th percentile

Affected Products

VendorProductVersions
microsoftvirtual_machine2000, 3000, 3100
n/an/an/a

Timeline

  • Oct 11, 2002 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 4, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Feb 9, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 3, 2023 EPSS Score
  • Jul 17, 2023 EPSS Score
  • Aug 9, 2023 EPSS Score
  • Sep 8, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›