CVE-2000-0327

HighCVSS 7.6/10Last modified Jun 16, 2026

Description

Microsoft Virtual Machine (VM) allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, aka the "Virtual Machine Verifier" vulnerability.

Metrics

CVSS 2.0 7.6/10AV:N/AC:H/Au:N/C:C/I:C/A:C

Affected software

No affected versions have been published.

Timeline

Published: Oct 21, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-03285.0Windows NT 4.0 generates predictable random TCP initial sequence numbers (ISN), which allows remote attackers to perform spoofing and sessio CVE-2000-03295.1A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML CVE-2000-03307.6The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File CVE-2000-03315.0Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service vi CVE-2000-03325.0UltraBoard.pl or UltraBoard.cgi CGI scripts in UltraBoard 1.6 allows remote attackers to read arbitrary files via a pathname string that inc CVE-2000-03335.0tcpdump, Ethereal, and other sniffer packages allow remote attackers to cause a denial of service via malformed DNS packets in which a jump CVE-2000-03342.1The Allaire Spectra container editor preview tool does not properly enforce object security, which allows an attacker to conduct unauthorize CVE-2000-03357.5The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.CVE-2000-03362.1Linux OpenLDAP server allows local users to modify arbitrary files via a symlink attack.CVE-2000-03377.2Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.CVE-2000-03385.5Concurrent Versions Software (CVS) uses predictable temporary file names for locking, which allows local users to cause a denial of service CVE-2000-03397.5ZoneAlarm 2.1.10 and earlier does not filter UDP packets with a source port of 67, which allows remote attackers to bypass the firewall rule