GCVE - cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:virtual_machine:3805:*:*:*:*:*:*:*

part: a version: 3805 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Virtual Machine (`5bc15397-f06d-5974-b006-4bd26f56d8c0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2003-0111`	vulnerable	2026-06-08 04:47:20.684205	Details available The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise." Published: 2003-04-15T04:00:00.000Z Updated: 2024-08-08T01:43:35.608Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/11751.php http://www.kb.cert.org/vuls/id/447569 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-011 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A136	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0867`	vulnerable	2026-06-08 04:46:22.412884	Details available Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw." Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T03:03:49.362Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/10134.php http://www.kb.cert.org/vuls/id/792881 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 http://www.securityfocus.com/bid/5750	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0866`	vulnerable	2026-06-08 04:46:22.412403	Details available Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote attackers to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL terminated by a null string, aka "DLL Execution via JDBC Classes." Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T03:03:49.171Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/10133.php http://www.kb.cert.org/vuls/id/307306 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 http://www.securityfocus.com/bid/5751 http://archives.neohapsis.com/archives/bugtraq/2002-09/0271.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-0865`	vulnerable	2026-06-08 04:46:22.411812	Details available A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes." Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T03:03:49.222Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/10135.php http://www.securityfocus.com/bid/5752 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052 http://www.kb.cert.org/vuls/id/140898	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.