CVE-2002-0867: Microsoft Virtual Machine

Medium severity, CVSS 5.0. EPSS: 27.3% chance of exploitation in the next 30 days.

Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw."

Affected products

• Microsoft Virtual Machine: version 2000 only; version 3000 only; version 3100 only; version 3188 only; version 3200 only; version 3300 only; …

Published 2002-10-11. Last modified 2026-06-16.