CVE-2003-0111: microsoft virtual_machine
Vulnerability summary
CVE-2003-0111 is a high (CVSS 7.5) vulnerability in microsoft virtual_machine. EPSS estimates a 35.84% chance of exploitation in the next 30 days, higher than 98.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-04-2003PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allows remote attackers to bypass security checks and execute arbitrary code via a malicious Java applet, aka "Flaw in Microsoft VM Could Enable System Compromise."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
35.84%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
-0.82 pp
From 36.67% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundMicrosoft Java Virtual Machine 3802 Series - Bytecode Verifier
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
- virtual_machine3802 | 3805 | 3809
1 vendor · 1 product
References
4 links
docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-011Vendor AdvisoryX Refsource MS- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A136VDB EntrySignatureX Refsource OVAL