Vulnerability CVE-2003-0111
Published: 2003-05-05   Modified: 2012-02-12

Description:
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Microsoft -> Virtual machine 
Microsoft -> Windows 2000 
Microsoft -> Windows 2000 terminal services 

 References:
http://www.iss.net/security_center/static/11751.php
http://www.kb.cert.org/vuls/id/447569
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-011
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A136
Copyright 2024, cxsecurity.com

 

Back to Top