CVE-2002-0865
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet,…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 19.8%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 19.84% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/virtual machine
- Source
- cve@mitre.org
References
- http://www.iss.net/security_center/static/10135.phpPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/140898US Government Resource
- http://www.securityfocus.com/bid/5752
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052
- http://www.iss.net/security_center/static/10135.phpPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/140898US Government Resource
- http://www.securityfocus.com/bid/5752
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.