CVE-2002-0866: Microsoft Virtual Machine

High severity, CVSS 7.5. EPSS: 41.4% chance of exploitation in the next 30 days.

Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes."

Affected products

• Microsoft Virtual Machine: version 2000 only; version 3000 only; version 3100 only; version 3188 only; version 3200 only; version 3300 only; …

Published 2002-10-11. Last modified 2026-06-16.