CVE-2002-1325: Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user...

Security readout for executives and security teams

This is an old information-disclosure issue in Microsoft Virtual Machine. A malicious Java applet could learn the local Windows username by reading a system property. The business impact is limited unless legacy systems still run the affected Microsoft VM and allow Java applets. Exposure is most likely in obsolete Windows or Internet Explorer environments that still include Microsoft Virtual Machine build 5.0.3805 or earlier and permit Java applets. Current systems without Microsoft VM or applet support are unlikely to be affected based on the provided evidence. Low for modern environments, but worth closing during legacy technology cleanup. The finding exposes a username rather than system control, yet affected systems are obsolete and may carry broader unmanaged risk. Mitigation focus: Check Microsoft MS02-069 guidance for the vendor-supported update or removal path.; Retire systems that depend on Microsoft Virtual Machine where feasible.; Disable Java applets in legacy browsers if business use is not required..

Prepared

Jun 30, 2026, 03:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.