CVEvulnerability
CVE-2002-0865
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-10-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."
Affected configurations
• microsoft virtual machine 2000
• microsoft virtual machine 3000
• microsoft virtual machine 3100
• microsoft virtual machine 3188
• microsoft virtual machine 3200
• microsoft virtual machine 3300
• microsoft virtual machine 3802
• microsoft virtual machine 3805
References
- http://www.iss.net/security_center/static/10135.php Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/140898 US Government Resource
- http://www.securityfocus.com/bid/5752 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 docs.microsoft.com
- http://www.iss.net/security_center/static/10135.php Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/140898 US Government Resource
- http://www.securityfocus.com/bid/5752 www.securityfocus.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 docs.microsoft.com