CVE-2002-0866

CVE Database · CVE-2002-0866

CVE-2002-0866

· N/AModified

CVSS v3.1

N/A

EPSS

41.36%

Published

Oct 11, 2002

Modified

Apr 15, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBMicrosoft VM 2000/3000/3100/3188/3200/3300/3802/3805 series - JDBC Class Code Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."

Affected Products (8)

microsoft · virtual_machinevulnerable

References (10)

http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html

http://www.iss.net/security_center/static/10133.php

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/307306

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/5751

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052

http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html

http://www.iss.net/security_center/static/10133.php

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/307306

KEV Catalog EPSS Scores Vendors All CVEs