CVE-1999-0766

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

The Microsoft Java Virtual Machine allows a malicious Java applet to execute arbitrary commands outside of the sandbox environment.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-16

Affected software

No affected versions have been published.

Timeline

Published
Oct 21, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-07677.2Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable.CVE-1999-07687.5Buffer overflow in Vixie Cron on Red Hat systems via the MAILTO environmental variable.CVE-1999-07697.2Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.CVE-1999-07702.1Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of CVE-1999-07715.0The web components of Compaq Management Agents and the Compaq Survey Utility allow a remote attacker to read arbitrary files via a .. (dot dCVE-1999-07726.4Denial of service in Compaq Management Agents and the Compaq Survey Utility via a long string sent to port 2301.CVE-1999-07737.2Buffer overflow in Solaris lpset program allows local users to gain root access.CVE-1999-07747.2Buffer overflows in Mars NetWare Emulation (NWE, mars_nwe) package via long directory names.CVE-1999-077510.0Cisco Gigabit Switch routers running IOS allow remote attackers to forward unauthorized packets due to improper handling of the "establishedCVE-1999-07765.0Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.CVE-1999-07777.5IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.CVE-1999-07787.2Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.
CVE-1999-0766: Critical severity, CVSS 9.3 | Vulnix