Microsoft Java Virtual Machine 3802 Series - Bytecode Verifier

Related Vulnerabilities: CVE-2003-0111  
Publish Date: 21 Nov 2002
                							

                source: http://www.securityfocus.com/bid/6221/info

The Microsoft Java virtual machine implementation contains a vulnerability that may allow for malicious Java applets to escape the security sandbox.

An applet constructed at the bytecode-level may be able to perform some illegal operations. If these operations are performed, it may be possible to escape the security constraints placed on the applet by the JVM.

Code execution with the privileges of the victim user may be possible.

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/22027-1.tar.gz

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/22027-2.tar.gz

https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/22027-3.tar.gz