Microsoft Virtual Machine Exposure Of XML Supported Methods Vulnerability
BID:5752
Info
Microsoft Virtual Machine Exposure Of XML Supported Methods Vulnerability
| Bugtraq ID: | 5752 |
| Class: | Configuration Error |
| CVE: |
CVE-2002-0865 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 19 2002 12:00AM |
| Updated: | Jul 11 2009 05:06PM |
| Credit: | Reported in Microsoft Security Bulletin MS02-052. |
| Vulnerable: |
Microsoft Virtual Machine 3805 Series Microsoft Virtual Machine 3802 Series Microsoft Virtual Machine 3300 Series Microsoft Virtual Machine 3200 Series Microsoft Virtual Machine 3188 Microsoft Virtual Machine 3100 Series Microsoft Virtual Machine 3000 Series Microsoft Virtual Machine 2000 Series |
| Not Vulnerable: | |
Discussion
Microsoft Virtual Machine Exposure Of XML Supported Methods Vulnerability
The reported vulnerability involves a Java class that provides support for use of XML methods by Java classes. This class should only allow a certain trusted set of applets to access these methods. Due to a flaw in the design of this class, these XML methods are exposed to any application and could allow for execution of arbitrary code in the security context of the current user.
This vulnerability may be related to one of the Virtual Machine issues reported in Bugtraq ID 5670, however it is not clear at this time.
The reported vulnerability involves a Java class that provides support for use of XML methods by Java classes. This class should only allow a certain trusted set of applets to access these methods. Due to a flaw in the design of this class, these XML methods are exposed to any application and could allow for execution of arbitrary code in the security context of the current user.
This vulnerability may be related to one of the Virtual Machine issues reported in Bugtraq ID 5670, however it is not clear at this time.
Exploit / POC
Microsoft Virtual Machine Exposure Of XML Supported Methods Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Microsoft Virtual Machine Exposure Of XML Supported Methods Vulnerability
Solution:
Microsoft has released patches through the Windows Update website.
Solution:
Microsoft has released patches through the Windows Update website.