CVE-2003-0111

Опубликовано: 05 мая 2003

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."

Ссылки

http://www.iss.net/security_center/static/11751.php
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/447569
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-011
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A136
http://www.iss.net/security_center/static/11751.php
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/447569
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-011
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A136

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:virtual_machine:3809:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.26141

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-83gw-hr2p-gg57

github

больше 3 лет назад