CVE-2002-0865
Microsoft Virtual Machine <= 5.0.3805 - Remote Code Execution via Unsafe XML Support Class Methods
Title source: llmDescription
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."
References (4)
Core 4
Core References
Patch, Vendor Advisory vdb-entry
x_refsource_xf
http://www.iss.net/security_center/static/10135.php
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/5752
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052
US Government Resource third-party-advisory
x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/140898
Scores
EPSS
0.1984
EPSS Percentile
97.2%
Details
Status
published
Products (8)
microsoft/virtual_machine
2000
microsoft/virtual_machine
3000
microsoft/virtual_machine
3100
microsoft/virtual_machine
3188
microsoft/virtual_machine
3200
microsoft/virtual_machine
3300
microsoft/virtual_machine
3802
microsoft/virtual_machine
3805
Published
Oct 11, 2002
Tracked Since
Feb 18, 2026