Lucene search
HistorySep 01, 2004 - 4:00 a.m.
CVE-2002-1257
cve-2002-1257
microsoft virtual machine
remote code execution
java applet
com
component object model
web security
nvd
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
High
0.023 Low
EPSS
Percentile
89.7%
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.
Affected configurations
Node
microsoftwindows_2000
ORmicrosoftwindows_2000sp1
ORmicrosoftwindows_2000sp2
ORmicrosoftwindows_2000sp3
ORmicrosoftwindows_2000_terminal_services
ORmicrosoftwindows_2000_terminal_servicessp1
ORmicrosoftwindows_2000_terminal_servicessp2
ORmicrosoftwindows_2000_terminal_servicessp3
ORmicrosoftwindows_95
ORmicrosoftwindows_95sr2
ORmicrosoftwindows_98gold
ORmicrosoftwindows_98se
ORmicrosoftwindows_me
ORmicrosoftwindows_ntMatch4.0sp1enterprise_server
ORmicrosoftwindows_ntMatch4.0sp1server
ORmicrosoftwindows_ntMatch4.0sp1terminal_server
ORmicrosoftwindows_ntMatch4.0sp1workstation
ORmicrosoftwindows_ntMatch4.0sp2enterprise_server
ORmicrosoftwindows_ntMatch4.0sp2server
ORmicrosoftwindows_ntMatch4.0sp2terminal_server
ORmicrosoftwindows_ntMatch4.0sp2workstation
ORmicrosoftwindows_ntMatch4.0sp3enterprise_server
ORmicrosoftwindows_ntMatch4.0sp3server
ORmicrosoftwindows_ntMatch4.0sp3terminal_server
ORmicrosoftwindows_ntMatch4.0sp3workstation
ORmicrosoftwindows_ntMatch4.0sp4enterprise_server
ORmicrosoftwindows_ntMatch4.0sp4server
ORmicrosoftwindows_ntMatch4.0sp4terminal_server
ORmicrosoftwindows_ntMatch4.0sp4workstation
ORmicrosoftwindows_ntMatch4.0sp5enterprise_server
ORmicrosoftwindows_ntMatch4.0sp5server
ORmicrosoftwindows_ntMatch4.0sp5terminal_server
ORmicrosoftwindows_ntMatch4.0sp5workstation
ORmicrosoftwindows_ntMatch4.0sp6enterprise_server
ORmicrosoftwindows_ntMatch4.0sp6server
ORmicrosoftwindows_ntMatch4.0sp6terminal_server
ORmicrosoftwindows_ntMatch4.0sp6workstation
ORmicrosoftwindows_ntMatch4.0sp6aenterprise_server
ORmicrosoftwindows_ntMatch4.0sp6aserver
ORmicrosoftwindows_ntMatch4.0sp6aterminal_server
ORmicrosoftwindows_ntMatch4.0sp6aworkstation
ORmicrosoftwindows_xpgoldprofessional
ORmicrosoftwindows_xpsp1home
Related
cvelist
cvelist
CVE-2002-1257
2004-09-01 04:00:00
nvd
nvd
CVE-2002-1257
2002-12-23 05:00:00
openvas
openvas
Flaw in Microsoft VM Could Allow Code Execution (810030)
2005-11-03 00:00:00
Flaw in Microsoft VM Could Allow Code Execution (810030)
2005-11-03 00:00:00
nessus
nessus
MS02-052: Flaw in Microsoft VM Could Allow Code Execution (810030)
2002-11-28 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
High
0.023 Low
EPSS
Percentile
89.7%
Related for CVE-2002-1257