CVE-2002-0865
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."
Una clase que soporta XML (Lenguaje de Marcas eXtensible) en Microsoft Virtual Machine (VM) 5.0.3805 y anteriores expone cierto métodos inseguros, que permiten a atacantes remotos ejecutar código inseguro mediante un applet de Java. También conocida como "Métodos inapropiados expuestos en clases de soporte XML"
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2002-08-15 CVE Reserved
- 2002-10-11 CVE Published
- 2023-08-09 EPSS Updated
- 2024-08-08 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/140898 | Third Party Advisory |
|
| http://www.securityfocus.com/bid/5752 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.iss.net/security_center/static/10135.php | 2018-10-12 |
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 | 2018-10-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Virtual Machine Search vendor "Microsoft" for product "Virtual Machine" | 2000 Search vendor "Microsoft" for product "Virtual Machine" and version "2000" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Virtual Machine Search vendor "Microsoft" for product "Virtual Machine" | 3000 Search vendor "Microsoft" for product "Virtual Machine" and version "3000" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Virtual Machine Search vendor "Microsoft" for product "Virtual Machine" | 3100 Search vendor "Microsoft" for product "Virtual Machine" and version "3100" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Virtual Machine Search vendor "Microsoft" for product "Virtual Machine" | 3188 Search vendor "Microsoft" for product "Virtual Machine" and version "3188" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Virtual Machine Search vendor "Microsoft" for product "Virtual Machine" | 3200 Search vendor "Microsoft" for product "Virtual Machine" and version "3200" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Virtual Machine Search vendor "Microsoft" for product "Virtual Machine" | 3300 Search vendor "Microsoft" for product "Virtual Machine" and version "3300" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Virtual Machine Search vendor "Microsoft" for product "Virtual Machine" | 3802 Search vendor "Microsoft" for product "Virtual Machine" and version "3802" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Virtual Machine Search vendor "Microsoft" for product "Virtual Machine" | 3805 Search vendor "Microsoft" for product "Virtual Machine" and version "3805" | - |
Affected
| ||||||