MS02-013: Cumulative VM Update (300845)

The Microsoft VM is a virtual machine for the Win32 operating environment. There are numerous security flaws in the remote Microsoft VM that could allow an attacker to execute arbitrary code on this host. To exploit these flaws, an attacker would need to set up a malicious web site with a rogue...

Microsoft Java VM multiple bugs

No description provided...

Microsoft Security Bulletin MS02-069: Flaw in Microsoft VM Could Enable System Compromise (810030)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Flaw in Microsoft VM Could Enable System Compromise 810030 Date: 11 December 2002 Software: Microsoft VM Impact: Eight vulnerabilities, the most serious of which would enable an...

MS02-052: Flaw in Microsoft VM Could Allow Code Execution (810030)

The remote host is running a Microsoft VM machine that has a bug in its bytecode verifier that could allow a remote attacker to execute arbitrary code on this host, with the privileges of the SYSTEM. To exploit this vulnerability, an attacker would need to send a malformed applet to a user on thi...

Microsoft Java implementation allows execution of malicious code

Overview A class in Microsoft's Java virtual machine VM does not properly validate trusted applets, allowing untrusted applets to exploit native methods and execute arbitrary code. Description Microsoft's Java VM is installed on Windows 98, NT, 2000, and xp. It is used by Internet Explorer and...

Microsoft VM 20003000310031883200330038023805 series - JDBC Class Code Execution

Microsoft VM 20003000310031883200330038023805 series - JDBC Class Code Execution source: https://www.securityfocus.com/bid/5751/info Java Database Connectivity JDBC classes are used by the Virtual Machine to provide connectivity to various data sources. It is possible to spoof a JDBC class reques...

Microsoft VM 2000/3000/3100/3188/3200/3300/3802/3805 series - JDBC Class Code Execution

source: https://www.securityfocus.com/bid/5751/info Java Database Connectivity JDBC classes are used by the Virtual Machine to provide connectivity to various data sources. It is possible to spoof a JDBC class request to make it appear as though it came from an authorized applet. This could allow...

Security Bulletin MS02-052: Flaw in Java VM JDBC Classes Could Allow Code Execution (Q329077)

---------------------------------------------------------------------- Title: Flaw in Microsoft VM JDBC Classes Could Allow Code Execution Q329077 Released: 18 September 2002 Software: Versions of the Microsoft virtual machine Microsoft VM Impact: Three vulnerabilities, the most serious of which...

CVE-2002-0076

Java Runtime Environment JRE Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in 1 Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, 2 Netscape 6.2.1 and earlier, and...

Security Bulletin MS02-013 (Version 2.0)

---------------------------------------------------------------------- Title: 04 March 2002 Cumulative VM Update Released: 04 March 2002 Revised: 18 March 2002 version 2.0 Software: Microsoft Virtual Machine Impact: Information Disclosure, run code of an attacker's choice Max Risk: Critical...

CVE-1999-1478

The CVE-1999-1478 entry concerns Sun’s HotSpot Performance Engine VM. A remote attacker can cause a denial of service on any server running HotSpot by issuing a URL that includes the [ character. The connected records confirm the affected component (Sun HotSpot Performance Engine VM) and the expl...

CVE-1999-1478

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the character...

CVE-1999-1478: Undefined Security Weakness

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the character...

Lotus Notes Java VM leaks file existence through timing difference in ECLs

Overview Lotus Notes JVM leaks information about the existence of a file. Description A malicious Java applet run in the Lotus Notes web browser can determine if a local file exists. Notes' preferences must be set to browse the web using the Notes browser, with execution of Java applets...

CVE-2000-1061

CVE-2000-1061 involves the Microsoft Virtual Machine (VM) in Internet Explorer 4.x–5.x, where an unsigned applet can create and use ActiveX controls. This enables a remote attacker to bypass IE security settings and execute arbitrary commands via a malicious web page or email. The underlying issu...

Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5

========================================================================= Security Hole in ECL Feature of Java VM Embedded in Lotus Notes Client R5 http://java-house.etl.go.jp/ml/archive/j-h-b/038904.html ========================================================================= The security hole...

Security Bulletin (MS00-081)

Microsoft Security Bulletin MS00-081 - -------------------------------------- Patch Available for New Variant of "VM File Reading" Vulnerability Originally posted: October 25, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the Microsoftr virtual...

Security Bulletin (MS00-075)

Microsoft Security Bulletin MS00-075 - -------------------------------------- Patch Available for "Microsoft VM ActiveX Component" Vulnerability Originally posted: October 12, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr virtual machin...

Очередная серьезная дырка в Internet Explorer (Microsoft VM ActiveX Component)

Один из встроенных JAVA-объектов позволяет выполнение любых ActiveX-компонент, в т.ч. не помеченные как безопасные...

Security Bulletin (MS00-059)

Microsoft Security Bulletin MS00-059 - -------------------------------------- Patch Available for "Java VM Applet" Vulnerability Originally posted: August 21, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the Microsoftr virtual machine Microsoft V...