User Directory Exposure in Microsoft Virtual Machine by Microsoft

CVE-2002-1325

Summary

The vulnerability discovered in Microsoft Virtual Machine allows unauthorized remote attackers to access sensitive information regarding local user accounts. Specifically, the Java applet's ability to retrieve the user.dir system property can reveal usernames, posing a security risk for affected systems. Users operating on Microsoft Virtual Machine build 5.0.3805 or earlier are advised to update their software to mitigate this risk and protect their privacy.

References