vulnwire
7.5high

CVE-2003-0111in critical feed1 exploit

The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, all…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
35.8%
percentile 98%
Public exploits
1
Exploit-DB

The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."

Exploit prediction (EPSS)

35.84% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-22027 Microsoft Java Virtual Machine 3802 Series - Bytecode Verifier · remote · 2002-11-21

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • iss.net /security_center/static/11751.php · vdb-entry, x_refsource_XF, x_transferred
  • kb.cert.org /vuls/id/447569 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2003/ms03-011 · vendor-advisory, x_refsource_MS, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A136 · vdb-entry, signature, x_refsource_OVAL, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.