CVE-2002-1257: Microsoft Windows 2000

High severity, CVSS 10.0. EPSS: 15.3% chance of exploitation in the next 30 days.

Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2000 Terminal Services: any version
• Microsoft Windows 95: any version
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Me: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2002-12-23. Last modified 2026-06-16.