Vulnerability Report

CVE-2002-0865

RCE

Title: Microsoft VM inappropriate methods exposed in XML support classes

RCE

Proof Of Concept

No public PoC currently indexed for CVE-2002-0865.

CWE Category NVD-CWE-noinfo
Published Date Oct 11, 2002
Modified Date Apr 03, 2025
Exploit Status Not Found
Score 7.5 CVSS v2.0
Exploit Probability (EPSS)
6.34%

Vulnerability Summary

CVE-2002-0865: A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."

Impacted Vendors

M
microsoft 1
T
teradata 1

Reference Links

http://www.iss.net/security_center/static/10135.php http://www.kb.cert.org/vuls/id/140898 http://www.securityfocus.com/bid/5752 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 http://www.iss.net/security_center/static/10135.php http://www.kb.cert.org/vuls/id/140898 http://www.securityfocus.com/bid/5752 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052
CVSS v2.0
Source Entity [email protected]
Severity HIGH
7.5
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2002-0865 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.