Security Advisory

CVE-2002-0866

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2004-09-01 04:00:00
Last updated 2024-08-08 03:03:49
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."