CVE-2002-1291: Microsoft Java Virtual Machine

Medium severity, CVSS 5.0. EPSS: 18.4% chance of exploitation in the next 30 days.

The Microsoft Java implementation, as used in Internet Explorer, allows remote attackers to read arbitrary local files and network shares via an applet tag with a codebase set to a "file://%00" (null character) URL.

Affected products

• Microsoft Java Virtual Machine: version 1.1 only

Published 2002-11-29. Last modified 2026-06-16.