CVE-2002-0865

A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and earlier, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote attackers to execute unsafe code via a Java applet, aka "Inappropriate Methods Exposed in XML Support Classes."

• http://www.iss.net/security_center/static/10135.phpPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/140898US Government Resource
• http://www.securityfocus.com/bid/5752
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052
• http://www.iss.net/security_center/static/10135.phpPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/140898US Government Resource
• http://www.securityfocus.com/bid/5752
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-052

Published

Oct 11, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0859Buffer overflow in the OpenDataSource function of the Jet en…
• CVE-2002-0860The LoadText method in the spreadsheet component in Microsof…
• CVE-2002-0861Microsoft Office Web Components (OWC) 2000 and 2002 allows r…
• CVE-2002-0862The (1) CertGetCertificateChain, (2) CertVerifyCertificateCh…
• CVE-2002-0863Remote Data Protocol (RDP) version 5.0 in Microsoft Windows …
• CVE-2002-0864The Remote Data Protocol (RDP) version 5.1 in Microsoft Wind…
• CVE-2002-0866Java Database Connectivity (JDBC) classes in Microsoft Virtu…
• CVE-2002-0867Microsoft Virtual Machine (VM) up to and including build 5.0…
• CVE-2002-0869Unknown vulnerability in the hosting process (dllhost.exe) f…
• CVE-2002-0870The original patch for the Cisco Content Service Switch 1100…
• CVE-2002-0871xinetd 2.3.4 leaks file descriptors for the signal pipe to s…
• CVE-2002-0872l2tpd 0.67 does not initialize the random number generator, …