Login Request a demo
Unscored severity · published Oct 11, 2002
CVE-2002-0865
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe…
–
CVSS
19.8%
EPSS
No
On KEV
Description
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."
Exploitation
Is it being used?
Exploit prediction (EPSS)19.8% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
Virtual Machine · Microsoft
2000; 3000; 3100; 3188; 3200; 3300; +2 more · source: NVD
Affected product
VM
Virtual Machine
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0865
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0865
Patch
http://www.iss.net/security_center/static/10135.php
US Government Resource
http://www.kb.cert.org/vuls/id/140898
www.securityfocus.com
http://www.securityfocus.com/bid/5752
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052
More from Virtual Machine
–
CVE-2003-0111
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security…
–
CVE-2002-0867
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a…
–
CVE-2002-0866
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries)…
–
CVE-2002-0979
The Java logging feature for the Java Virtual Machine in Internet Explorer writes output from functions such as System.out.println to a known pathname, which can be used to…
–
CVE-2002-0076
Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as…