CVE-2002-0866
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."
Scoring
- CVSS base score
- 1.65
- EPSS probability
- 41.32%
- Published
- 2004-09-01
- Last modified
- 2026-03-16
Affected products
- n/a n/a