CVE-2003-0016

Apache before 2.0.44, when running on unpatched Windows 9x and Me operating systems, allows remote attackers to cause a denial of service or execute arbitrary code via an HTTP request containing MS-DOS device names...

CVE-2003-0009

Cross-site scripting XSS vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter...

CVE-2004-0201

The CVE-2004-0201 entry documents a heap-based buffer overflow in the HTML Help viewer hh.exe used by HTML Help (.chm) on Windows platforms (Windows 98, Me, NT 4.0, 2000, XP, and Server 2003). The vulnerability allows remote code execution via a .CHM file with a large length field, enabling an at...

CVE-2004-0420

CVE-2004-0420 describes a remote code execution in the Windows Shell when a file is spoofed via a CLSID in the filename. The vulnerability affects Windows 98, Me, NT 4.0, 2000, XP, and Server 2003, enabling an attacker who lures a user to a malicious Web page to execute arbitrary code with the us...

Microsoft Windows Help And Support Center URI Validation Code Execution Vulnerability

Description Microsoft has reported a vulnerability in the Help and Support Center that is related to how HCP URIs are validated. This issue could reportedly be exploited via a malicious web page or HTML e-mail to execute arbitrary code on a client system. The issue may permit an attacker to injec...

CVE-2003-0009

Cross-site scripting XSS vulnerability in Help and Support Center for Microsoft Windows Me allows remote attackers to execute arbitrary script in the Local Computer security context via an hcp:// URL with the malicious script in the topic parameter...

Microsoft Windows Me and XP Help and Support Center does not adequately validate hcp:// URI parameters

Overview The Help and Support Center included with Microsoft Windows Millennium Edition and XP does not adequately validate parameters provided in an "hcp://" URI. As a result, an attacker could construct a URI that could cause the Help and Support Center to execute arbitrary script, effectively...

MS-Windows ME IE/Outlook/HelpCenter critical vulnerability

-- Summary -- From the Microsoft Security Bulletin MS03-006: " A security vulnerability is present in the Windows Me version of Help and Support Center .... An attacker could exploit the vulnerability by constructing a URL that, when clicked on by the user, would execute code of the attacker's...

Microsoft Window ME Help Center buffer overflow

Buffer overflow during hcp:// URL processing...

Microsoft Security Bulletin MS03-006: Flaw in Windows Me Help and Support Center Could Enable Code Execution (812709)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------- Title: Flaw in Windows Me Help and Support Center Could Enable Code Execution 812709 Date: 26 February, 2003 Software: Microsoft Windows Me Impact: Run Code of Attacker's Choice Max Risk: Critica...

CVE-2002-1940

LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application...

CVE-2001-1116

CVE-2001-1116 affects Identix BioLogon 2.03 and earlier. On multi-monitor systems running Windows 98/ME, it does not lock secondary displays, allowing an attacker with physical access to bypass authentication via a secondary display. The available sources confirm the affected product/versions and...

CVE-2001-1116

Identix BioLogon 2.03 and earlier does not lock secondary displays on a multi-monitor system running Windows 98 or ME, which allows an attacker with physical access to the system to bypass authentication through a secondary display...

CVE-2001-0877

CVE-2001-0877 describes an unchecked buffer in Windows UPnP NOTIFY handling that can allow remote attackers to cause denial of service or execute code with SYSTEM privileges on Windows XP (and related UPnP-enabled Windows 98/ME). Exploitation via specially malformed NOTIFY messages (SSDP) can tri...

CVE-2001-0919

Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript...

CVE-2001-0919

CVE-2001-0919 affects Internet Explorer 5.50.4134.0100 on Windows ME. When the browser’s cookie prompt option is enabled, it does not warn the user if a cookie is set via Javascript, exposing potential privacy leakage. The provided metrics indicate a low to moderate base severity (CVSS v2: 5.1, M...

CVE-2001-1552

ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol SSDP message. NOTE: multiple replies to the original post state that the problem could not be reproduced...

Переполнение буфера и DoS в SSDP/UpNP в Windows ME

Сервис вылетает при неправильных данных в порт TCP/5000. Переполнение буфера при разборе UDP-датаграммы порт 1900...

Multiple Remote Windows XP/ME/98 Vulnerabilities

Multiple Remote Windows XP/ME/98 Vulnerabilities Release Date: 12/20/01 Severity: High Systems Affected: Microsoft Windows XP All default systems Microsoft Windows 98 Certain configurations Microsoft Windows 98SE Certain configurations Microsoft Windows ME Certain configurations Description:...

Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow (1)

Microsoft Windows 98XPME - UPnP NOTIFY Buffer Overflow 1 // source: https://www.securityfocus.com/bid/3723/info Universal Plug and Play, or UPnP, is a service that allows for hosts to locate and use devices on the local network. UPnP support ships with Windows XP and ME. For Windows 98 and 98SE, ...