CVE-2002-1293: Microsoft Java Virtual Machine

High severity, CVSS 7.5. EPSS: 15.4% chance of exploitation in the next 30 days.

The Microsoft Java implementation, as used in Internet Explorer, provides a public load0() method for the CabCracker class (com.ms.vm.loader.CabCracker), which allows remote attackers to bypass the security checks that are performed by the load() method.

Affected products

• Microsoft Java Virtual Machine: version 1.1 only

Published 2002-11-29. Last modified 2026-06-16.