VULNERABILITY INTELLIGENCE
CVE-2002-1257
CVSS score10 HIGH
EPSS probability15.30%
CISA KEVNot currently listed
Published2002-12-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.