CVE-2000-0711: Microsoft Virtual Machine

High severity, CVSS 7.5. EPSS: 33.5% chance of exploitation in the next 30 days.

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.

Affected products

• Microsoft Virtual Machine: version 2000 only; version 3100 only; version 3200 only; version 3300 only
• Netscape Communicator: version 4.0 only; version 4.04 only; version 4.05 only; version 4.5 only; version 4.06 only; version 4.6 only; …

Published 2000-10-20. Last modified 2026-06-16.