Lucene search
HistorySep 29, 1999 - 4:00 a.m.
CVE-1999-0382
windows nt
screen saver
security flaw
cve-1999-0382
elevated privileges
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.9%
The screen saver in Windows NT does not verify that its security context has been changed properly, allowing attackers to run programs with elevated privileges.
Affected configurations
Node
microsoftwindows_ntMatch3.5.1sp1
ORmicrosoftwindows_ntMatch3.5.1sp2
ORmicrosoftwindows_ntMatch3.5.1sp3
ORmicrosoftwindows_ntMatch3.5.1sp4
ORmicrosoftwindows_ntMatch3.5.1sp5
ORmicrosoftwindows_ntMatch4.0
ORmicrosoftwindows_ntMatch4.0sp1
ORmicrosoftwindows_ntMatch4.0sp2
ORmicrosoftwindows_ntMatch4.0sp3
ORmicrosoftwindows_ntMatch4.0sp4
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_nt | microsoft windows nt | eq | 3.5.1 |
| microsoft:windows_nt | microsoft windows nt | eq | 4.0 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0005 Low
EPSS
Percentile
17.9%
Related for CVE-1999-0382