CVE-2003-0111

The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.iss.net/security_center/static/11751.php	Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/447569	Patch Third Party Advisory US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-011
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A136

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:virtual_machine:3802:::::::*
	cpe:2.3:a:microsoft:virtual_machine:3805:::::::*
	cpe:2.3:a:microsoft:virtual_machine:3809:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:microsoft:windows_2000::::::::
	cpe:2.3:o:microsoft:windows_2000::sp1::::::*
	cpe:2.3:o:microsoft:windows_2000::sp2::::::*
	cpe:2.3:o:microsoft:windows_2000::sp3::::::*
	cpe:2.3:o:microsoft:windows_2000_terminal_services::::::::
	cpe:2.3:o:microsoft:windows_2000_terminal_services::sp1::::::*
	cpe:2.3:o:microsoft:windows_2000_terminal_services::sp2::::::*
	cpe:2.3:o:microsoft:windows_2000_terminal_services::sp3::::::*

History

No history.

Information

Published : 2003-05-05 04:00

Updated : 2019-04-30 14:27

NVD link : CVE-2003-0111

Mitre link : CVE-2003-0111

CVE.ORG link : CVE-2003-0111

JSON object : View

Products Affected

microsoft

windows_2000
windows_2000_terminal_services
virtual_machine

CWE

NVD-CWE-Other

{"id": "CVE-2003-0111", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-05-05T04:00:00.000", "references": [{"url": "http://www.iss.net/security_center/static/11751.php", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/447569", "tags": ["Patch", "Third Party Advisory", "US Government Resource"], "source": "cve@mitre.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-011", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A136", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka \"Flaw in Microsoft VM Could Enable System Compromise.\""}, {"lang": "es", "value": "El componente Verificador de ByteCode de la M\u00e1quina Virtual (VW) de Microsoft compilaci\u00f3n 5.0.3809 y anteriores, usada en en Windows y en Internet Explorer, permite a atacantes remotos eludir comprobaciones de seguridad y ejecutar c\u00f3digo arbitrario mediante un applet de Java malicioso, tambi\u00e9n conocido como \"Fallo en Microsoft VW Podr\u00eda Permitir Compromiso del Sistema\""}], "lastModified": "2019-04-30T14:27:13.710", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB10F6CD-E12B-469B-8634-2185172D97D6"}, {"criteria": "cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBBEEAFB-9087-40C0-85A8-AAC82F6CD6D1"}, {"criteria": "cpe:2.3:a:microsoft:virtual_machine:3809:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C16D6A0B-3321-4444-B0DB-E0F8DD66DEB9"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "294EBA01-147B-4DA0-937E-ACBB655EDE53"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E8B7346-F2AA-434C-A048-7463EC1BB117"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D34EFE5-22B7-4E8D-B5B2-2423C37CFFA7"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8208AFC9-0EFC-4A90-AD5A-FD94F5542885"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D4168AE-D19E-482E-8F2B-3E798B2D84E7"}, {"criteria": "cpe:2.3:o:microsoft:windows_2000_terminal_services:*:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B5E149E7-B748-44F6-BB55-68D5BF87AF41"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}