Beveiligingsadvies

CVE-2002-0866

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2004-09-01 04:00:00
Laatst bijgewerkt 2024-08-08 03:03:49
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."