7.5

CVE-2002-0865

A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Virtual Machine Version 2000
Microsoft ≫ Virtual Machine Version 3000
Microsoft ≫ Virtual Machine Version 3100
Microsoft ≫ Virtual Machine Version 3188
Microsoft ≫ Virtual Machine Version 3200
Microsoft ≫ Virtual Machine Version 3300
Microsoft ≫ Virtual Machine Version 3802
Microsoft ≫ Virtual Machine Version 3805
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 19.84% 0.971
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.iss.net/security_center/static/10135.php
Patch
Vendor Advisory
http://www.kb.cert.org/vuls/id/140898
US Government Resource
http://www.securityfocus.com/bid/5752
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052