CVE-2002-0865: Microsoft Virtual Machine

High severity, CVSS 7.5. EPSS: 19.8% chance of exploitation in the next 30 days.

A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."

Affected products

• Microsoft Virtual Machine: version 2000 only; version 3000 only; version 3100 only; version 3188 only; version 3200 only; version 3300 only; …

Published 2002-10-11. Last modified 2026-06-16.