← Database

CVE-2002-1325

MEDIUM CVSS: 5.0 Published: 2002-12-23 Modified: 2026-06-16

Description

Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."

Affected Platforms

Microsoft Windows 98Microsoft Windows 98SeMicrosoft Windows NtMicrosoft Windows MeMicrosoft Windows XpMicrosoft Windows 2000 Terminal ServicesMicrosoft Windows 95Microsoft Windows 2000

Weakness Type

NVD-CWE-Other

References