High Published: May 05, 2003 Modified: Apr 03, 2025

CVE-2003-0111

7.5 CVSS SCORE

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."

CVSS Vector Details

Attack Vector Network

Attack Complexity Low

Confidentiality P

Integrity P

Availability P

Affected Software Configurations

a microsoft virtual_machine 3802 * * * * * * *
a microsoft virtual_machine 3805 * * * * * * *
a microsoft virtual_machine 3809 * * * * * * *
o microsoft windows_2000 * * * * * * * *
o microsoft windows_2000 * sp1 * * * * * *
o microsoft windows_2000 * sp2 * * * * * *
o microsoft windows_2000 * sp3 * * * * * *
o microsoft windows_2000_terminal_services * * * * * * * *
o microsoft windows_2000_terminal_services * sp1 * * * * * *
o microsoft windows_2000_terminal_services * sp2 * * * * * *

Weaknesses (CWE)

NVD-CWE-Other

References & External Links

External Resources

NVD Official Record Exploit-DB Search Exploits CVE Details Statistics GitHub PoC / Tools X / Twitter Discussions Google Search More

← Back to CVE Tracker