CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
95.5%
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka “DLL Execution via JDBC Classes.”
Vendor | Product | Version | CPE |
---|---|---|---|
microsoft | virtual_machine | 2000 | cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:* |
microsoft | virtual_machine | 3000 | cpe:2.3:a:microsoft:virtual_machine:3000:*:*:*:*:*:*:* |
microsoft | virtual_machine | 3100 | cpe:2.3:a:microsoft:virtual_machine:3100:*:*:*:*:*:*:* |
microsoft | virtual_machine | 3188 | cpe:2.3:a:microsoft:virtual_machine:3188:*:*:*:*:*:*:* |
microsoft | virtual_machine | 3200 | cpe:2.3:a:microsoft:virtual_machine:3200:*:*:*:*:*:*:* |
microsoft | virtual_machine | 3300 | cpe:2.3:a:microsoft:virtual_machine:3300:*:*:*:*:*:*:* |
microsoft | virtual_machine | 3802 | cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:* |
microsoft | virtual_machine | 3805 | cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:* |