This script is Copyright (C) 2002-2015 Tenable Network Security, Inc.
Arbitrary code can be executed on the remote host through the VM.
The remote host is running a Microsoft VM machine that has a bug
in its bytecode verifier that could allow a remote attacker to execute
arbitrary code on this host, with the privileges of the SYSTEM.
To exploit this vulnerability, an attacker would need to send a malformed
applet to a user on this host, and have him execute it. The malicious
applet would then be able to execute code outside the sandbox of the VM.
See also :
Microsoft has released a set of patches for Windows NT, 2000 and XP.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 7.9
Public Exploit Available : false
Family: Windows : Microsoft Bulletins
Nessus Plugin ID: 11177 ()
Bugtraq ID: 6371637263796380
CVE ID: CVE-2002-1257CVE-2002-1258CVE-2002-1260CVE-2002-1292CVE-2002-1295CVE-2002-1325
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.