Lucene search
MitreCVE-2002-0865HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-0865
2004-09-0104:00:00
mitre
web.nvd.nist.gov
37
security
microsoft vm
xml
java applet
cve-2002-0865
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.009
Percentile
82.4%
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka “Inappropriate Methods Exposed in XML Support Classes.”
Affected configurations
Node
microsoftvirtual_machineMatch2000
ORmicrosoftvirtual_machineMatch3000
ORmicrosoftvirtual_machineMatch3100
ORmicrosoftvirtual_machineMatch3188
ORmicrosoftvirtual_machineMatch3200
ORmicrosoftvirtual_machineMatch3300
ORmicrosoftvirtual_machineMatch3802
ORmicrosoftvirtual_machineMatch3805
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | virtual_machine | 2000 | cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:* |
| microsoft | virtual_machine | 3000 | cpe:2.3:a:microsoft:virtual_machine:3000:*:*:*:*:*:*:* |
| microsoft | virtual_machine | 3100 | cpe:2.3:a:microsoft:virtual_machine:3100:*:*:*:*:*:*:* |
| microsoft | virtual_machine | 3188 | cpe:2.3:a:microsoft:virtual_machine:3188:*:*:*:*:*:*:* |
| microsoft | virtual_machine | 3200 | cpe:2.3:a:microsoft:virtual_machine:3200:*:*:*:*:*:*:* |
| microsoft | virtual_machine | 3300 | cpe:2.3:a:microsoft:virtual_machine:3300:*:*:*:*:*:*:* |
| microsoft | virtual_machine | 3802 | cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:* |
| microsoft | virtual_machine | 3805 | cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:* |
Related
cert
cert
Microsoft Java implementation allows execution of malicious code
2002-10-11 00:00:00
nvd
nvd
CVE-2002-0865
2002-10-11 04:00:00
cvelist
cvelist
CVE-2002-0865
2004-09-01 04:00:00
openvas
openvas
Microsoft VM Multiple Vulnerabilities (MS02-052, MS02-069)
2005-11-03 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.1
Confidence
Low
EPSS
0.009
Percentile
82.4%
Related for CVE-2002-0865