{"api_version":"1","generated_at":"2026-07-23T23:01:57+00:00","cve":"CVE-2002-0865","urls":{"html":"https://cve.report/CVE-2002-0865","api":"https://cve.report/api/cve/CVE-2002-0865.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2002-0865","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2002-0865"},"summary":{"title":"CVE-2002-0865","description":"A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka \"Inappropriate Methods Exposed in XML Support Classes.\"","state":"PUBLISHED","assigner":"mitre","published_at":"2002-10-11 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.kb.cert.org/vuls/id/140898","name":"http://www.kb.cert.org/vuls/id/140898","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"],"title":"CERT/CC Vulnerability Note VU#140898","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.iss.net/security_center/static/10135.php","name":"http://www.iss.net/security_center/static/10135.php","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"ISS X-Force Database: msvm-xml-methods-access (10135): Microsoft Virtual Machine (VM) XML methods can be accessed","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052","name":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Security Bulletin MS02-052 - Critical | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/5752","name":"http://www.securityfocus.com/bid/5752","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Virtual Machine Exposure Of XML Supported Methods Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2002-0865","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2002-0865","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2002","cve_id":"865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"virtual_machine","cpe6":"2000","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"virtual_machine","cpe6":"3000","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"virtual_machine","cpe6":"3100","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"virtual_machine","cpe6":"3188","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"virtual_machine","cpe6":"3200","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"virtual_machine","cpe6":"3300","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"virtual_machine","cpe6":"3802","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2002","cve_id":"865","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"virtual_machine","cpe6":"3805","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T03:03:49.222Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"msvm-xml-methods-access(10135)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"http://www.iss.net/security_center/static/10135.php"},{"name":"5752","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/5752"},{"name":"MS02-052","tags":["vendor-advisory","x_refsource_MS","x_transferred"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052"},{"name":"VU#140898","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/140898"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2002-09-20T00:00:00.000Z","descriptions":[{"lang":"en","value":"A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka \"Inappropriate Methods Exposed in XML Support Classes.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2004-07-25T00:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"msvm-xml-methods-access(10135)","tags":["vdb-entry","x_refsource_XF"],"url":"http://www.iss.net/security_center/static/10135.php"},{"name":"5752","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/5752"},{"name":"MS02-052","tags":["vendor-advisory","x_refsource_MS"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052"},{"name":"VU#140898","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/140898"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2002-0865","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka \"Inappropriate Methods Exposed in XML Support Classes.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"msvm-xml-methods-access(10135)","refsource":"XF","url":"http://www.iss.net/security_center/static/10135.php"},{"name":"5752","refsource":"BID","url":"http://www.securityfocus.com/bid/5752"},{"name":"MS02-052","refsource":"MS","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052"},{"name":"VU#140898","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/140898"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2002-0865","datePublished":"2004-09-01T04:00:00.000Z","dateReserved":"2002-08-15T00:00:00.000Z","dateUpdated":"2024-08-08T03:03:49.222Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2002-10-11 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:2000:*:*:*:*:*:*:*","matchCriteriaId":"A299BA2B-FD34-4FD5-8A4B-EA99DA9BA3EE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3000:*:*:*:*:*:*:*","matchCriteriaId":"DC2655D3-B360-4F82-B9CE-EECC95E0FAEE"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3100:*:*:*:*:*:*:*","matchCriteriaId":"CB67AEF8-DD02-4F20-B920-AC0B26D47C98"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3188:*:*:*:*:*:*:*","matchCriteriaId":"B798772D-183C-4EE8-8E78-E37CCEC35B43"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3200:*:*:*:*:*:*:*","matchCriteriaId":"D133B730-EEDA-46E7-8CC4-4D0104D65C11"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3300:*:*:*:*:*:*:*","matchCriteriaId":"962D0B64-8EEE-4589-84B3-D504906AEEC2"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3802:*:*:*:*:*:*:*","matchCriteriaId":"FB10F6CD-E12B-469B-8634-2185172D97D6"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:*","matchCriteriaId":"FBBEEAFB-9087-40C0-85A8-AAC82F6CD6D1"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2002","CveId":"865","Ordinal":"1","Title":"CVE-2002-0865","CVE":"CVE-2002-0865","Year":"2002"},"notes":[{"CveYear":"2002","CveId":"865","Ordinal":"1","NoteData":"A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka \"Inappropriate Methods Exposed in XML Support Classes.\"","Type":"Description","Title":"CVE-2002-0865"},{"CveYear":"2002","CveId":"865","Ordinal":"2","NoteData":"2004-09-01","Type":"Other","Title":"Published"},{"CveYear":"2002","CveId":"865","Ordinal":"3","NoteData":"2004-07-24","Type":"Other","Title":"Modified"}]}}}