CVE-2005-1935

CVE-2005-1935 documents a heap-based buffer overflow in the BERDecBitString function of Microsoft's ASN.1 library (MSASN1.DLL). The overflow occurs when processing nested constructed bit strings, leading to a realloc of a non-null pointer and potential overwrite of freed memory, demonstrated via ...

CVE-2005-1980

CVE-2005-1980 corresponds to the MSDTC TIP Denial of Service vulnerability described in Microsoft Security Bulletin MS05-051 (CAN-2005-1980). The flaw affects MSDTC TIP processing, enabling a remote attacker to cause the DTC service to stop responding by sending a crafted TIP message. Microsoft l...

CVE-2006-1311

CVE-2006-1311 is a remote code execution vulnerability in Microsoft RichEdit. The RichEdit components in Windows 2000 SP4, XP SP2, 2003 SP1 and Office suites (2000 SP3, XP SP3, 2003 SP2) plus Office for Mac 2004 and Learning Essentials are affected. The flaw arises from insufficient validation wh...

CVE-2006-1313

CVE-2006-1313 is the Microsoft JScript memory corruption remote code execution vulnerability documented in MS06-023. It affects JScript in Windows 98/Me, Windows 2000 SP4, Windows XP (incl. SP1/SP2), and Windows Server 2003 families, including x64/Itanium variants, where JScript may release objec...

CVE-2006-3440

CVE-2006-3440 is a remote code execution vulnerability in the Winsock API (buffer overflow) affecting Windows 2000 SP4, XP SP1/SP2, XP Pro x64, Windows Server 2003 and Itanium/x64 variants. Exploitation requires convincing a user to open a specially crafted file or visit a crafted website, enabli...

CVE-2006-4689

CVE-2006-4689 covers a NetWare Driver Denial of Service in the Microsoft Client Service for NetWare (CSNW). Affected systems include Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 with SP1. The vulnerability arises from an unchecked handling of a crafted network message that could caus...

CVE-2009-1127

Microsoft Windows kernel Win32k subsystem (Win32k.sys) contains multiple vulnerabilities disclosed under CVE-2009-1127, CVE-2009-2513, and CVE-2009-2514 (MS09-065). The common root cause across the entries is improper validation of arguments passed to kernel/system calls (and related GDI input ha...

CVE-2009-2529

CVE-2009-2529 affects Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1, 7, and 8. The vulnerability arises from improper argument validation for unspecified variables in HTML component handling, enabling remote code execution via a crafted HTML document. Public information in connected KB ...

CVE-2009-4210

CVE-2009-4210 describes memory corruption in the Microsoft Windows Indeo codec exposed by crafted media content, affecting Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The OpenVAS entries corroborate multiple vulnerabilities in the Indeo codec and list CVE-2009-4210 among the affected vulne...

CVE-1999-0372

The CVE concerns the BackOffice Server installer leaking credentials: account names and passwords are written to a setup file (reboot.ini) and not deleted after installation. This exposes partial confidentiality risk on local execution, per the CVSS metrics (Low base score, Local attack vector, n...

CVE-2000-0771

CVE-2000-0771 refers to a Windows 2000 vulnerability where a local user can corrupt the local security policy by processing malformed RPC traffic, described as the “Local Security Policy Corruption.” The issue is a local-privilege-consistency disruption with a documented impact of partial availab...

CVE-2001-0351

The CVE-2001-0351 entry concerns Microsoft Windows 2000 Telnet Service. The vulnerability allows an unprivileged local user to invoke a system call that terminates an existing Telnet session, producing a denial-of-service condition. Affected software is Windows 2000 with the Telnet Service; the u...

CVE-2002-0694

The CVE-2002-0694 issue is tied to an unchecked buffer in Windows Help (Q323255) that affected Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP. Root cause: a vulnerability in the HTML Help facility could allow a remote attack...

CVE-2004-0839

CVE-2004-0839 is the IE Drag-and-Drop Vulnerability. The connected docs show it as a publicly disclosed CAN-2005-0053 vulnerability, which was addressed by Microsoft security updates MS05-014 and related MS05-008. The vulnerability arises from Internet Explorer handling drag-and-drop events, allo...

CVE-2005-0047

CVE-2005-0047 relates to a local privilege-escalation vulnerability in Windows OLE/COM Structured Storage handling (CAN-2005-0047) affecting Windows 2000, Windows XP, and Windows Server 2003. The root cause is improper validation of memory regions when processing COM structured storage files, ena...

CVE-2005-2126

The CVE-2005-2126 entry concerns a tampering vulnerability in the Windows FTP client. Public documentation (MS05-044/MSKB 905495 and CERT 415828) describes that when Enable Folder View for FTP Sites is enabled and a user initiates an FTP transfer, a remote server can craft file names to cause the...

CVE-2006-0376

CVE-2006-0376 affects the 802.11 wireless client in certain Windows family systems (Windows 2000, XP, Server 2003). The vulnerability arises because the client does not warn users when it associates with an ad hoc (peer-to-peer) station, or when a station in ad hoc mode associates with it. This o...

CVE-2006-2334

The CVE-2006-2334 issue affects the Windows NT kernel user-mode path conversion: the RtlDosPathNameToNtPathName_U API in NTDLL.DLL on Windows 2000 SP4 and XP SP2 mishandles DOS-style paths with trailing spaces, allowing context-dependent attackers to create files that aren’t accessible via the ex...

CVE-2007-6043

CVE-2007-6043 concerns the CryptGenRandom generator on Windows 2000, which produces predictable values. The description states this can let context-dependent attackers weaken cryptographic mechanisms, demonstrated via attacks on forward and backward security related to the use of eight RC4 instan...

CVE-2008-1457

CVE-2008-1457 describes a remote code execution vulnerability in the Microsoft Windows Event System. The flaw occurs when creating per-user subscriptions, allowing an attacker with valid logon credentials to craft a subscription request that could run arbitrary code with system privileges. Affect...

CVE-2008-3465

CVE-2008-3465 describes a heap overflow in the GDI API used when processing WMF images. The vulnerability arises from parsing a malformed file-size parameter in WMF files, which could allow a remote attacker to cause a denial of service or execute arbitrary code on affected Windows variants. Affe...

CVE-2009-0094

This CVE describes WPAD/ISATAP spoofing via WINS/DNS server vulnerabilities in Windows 2000 SP4 and Windows Server 2003 SP1/SP2. The root cause is lack of restrictions on registering WPAD/ISATAP names in WINS (and WPAD in DNS in related entries), enabling remote authenticated actors to hijack WPA...

CVE-2010-0491

CVE-2010-0491 is the IE HTML Object Memory Corruption vulnerability (Use-after-free) affecting Internet Explorer 5.01 SP4, 6, and 6 SP1. Exploitation requires crafting a page with an onreadystatechange handler to trigger arbitrary code execution; Microsoft documented this as part of MS10-018 and ...

CVE-1999-0595

CVE-1999-0595 affects Windows NT: during shutdown the system page file is not cleared, potentially leaving sensitive information in the paging file. This is described across multiple sources (NVD entry and various CVE records). The available documents indicate a confidentiality impact (partial) w...

CVE-2000-0834

CVE-2000-0834 : The Windows 2000 Telnet client defaults to NTLM authentication, enabling remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL pointing at a malicious server. The vulnerability affects the Windows 2000 Telnet client’s NTLM authentication behavior a...

CVE-2001-0350

Summary: CVE-2001-0350 affects Microsoft Windows 2000 Telnet Service, where the service creates named pipes with predictable names and does not verify them, enabling unprivileged local users to execute arbitrary code in the Local System context by providing a malicious named pipe and triggering c...

CVE-2001-1517

CVE-2001-1517 affects Windows 2000 RunAs (runas.exe). The issue is that cleartext authentication data is stored in memory, potentially allowing a attacker to recover usernames and passwords by a process sharing the same memory page after a RunAs operation ends. Evidence in connected sources confi...

CVE-2004-1080

Summary: CVE-2004-1080 describes a remote memory overwrite in the Windows WINS service (wins.exe) via a crafted WINS replication packet sent to TCP port 42, which could allow arbitrary code execution. Affected products: Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003...

CVE-2005-3174

CVE-2005-3174 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The vulnerability allows a user to log on to the domain when their password has expired if the fully qualified domain name (FQDN) is exactly 8 characters long. Connected sources confirm the affected OS and condition bu...

CVE-2009-1924

The CVE-2009-1924 entry relates to an integer/heap overflow in Microsoft Windows WINS (NetBIOS name resolution). Affected product: Windows Server/Windows 2000 SP4 with WINS service. Vulnerability arises when processing crafted WINS replication packets, allowing remote code execution with SYSTEM p...

CVE-2010-0486

CVE-2010-0486 describes a remote code execution vulnerability in Windows Authenticode Signature Verification (WinVerifyTrust) affecting PE and cabinet (.CAB) handling. The flaw arises from improper use of certain file digest fields during signing/verifying, enabling a modified signed file to exec...

CVE-2001-0663

The CVE-2001-0663 entry concerns Terminal Server in Windows NT and Windows 2000. Affected component: Terminal Server; vulnerability exploited by a sequence of invalid Remote Desktop Protocol (RDP) packets to cause a denial of service. Root cause: handling of invalid/malformed RDP packets leads to...

CVE-2001-1347

CVE-2001-1347 affects Windows 2000. The vulnerability arises when a local user sets a hardware breakpoint that is handled via global debug registers, which can cause other processes to terminate due to an exception and may allow hijacking of resources such as named pipes. The available sources de...

CVE-2005-1981

CVE-2005-1981 refers to a denial-of-service vulnerability in the Kerberos handling of Windows 2000 Server and Windows Server 2003 domain controllers (CAN-2005-1981). The issue allows a remote, authenticated attacker to send a crafted Kerberos message that can cause the domain controller’s authent...

CVE-2005-3175

CVE-2005-3175 concerns Microsoft Windows 2000 before Update Rollup 1 for SP4. The vulnerability permits a local administrator to unlock a computer that was locked by a domain administrator, enabling the local administrator to access the domain session. Connected documents corroborate the affected...

CVE-2007-2218

CVE-2007-2218 maps to a heap corruption/remote code execution vulnerability in the Windows Schannel security package. MS07-031 describes an issue where server-sent digital signatures are not adequately checked during the SSL handshake, allowing a remote attacker to execute code (browser or app us...

CVE-2007-3028

CVE-2007-3028 describes a denial-of-service vulnerability in Windows 2000 Server SP4 where the LDAP service in Active Directory fails to properly validate the number of convertible attributes in client-sent LDAP requests. The linked materials indicate this is a separate issue from CVE-2007-0040, ...

CVE-2009-1125

CVE-2009-1125 corresponds to the Windows Driver Class Registration Vulnerability. The Microsoft Windows kernel does not properly validate an argument passed to a Windows kernel system call, enabling local privilege escalation if a crafted user-mode application is run. Affected products include Wi...

CVE-2010-0023

CVE-2010-0023 affects the Client/Server Runtime Subsystem (CSRSS) on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The vulnerability stems from CSRSS not properly terminating processes after user logout, enabling a local attacker to gain privileges or access sensitive information via a craft...

CVE-2010-0238

CVE-2010-0238 corresponds to the Windows Kernel Registry Key Vulnerability. A denial-of-service occurs when the Windows kernel validates registry keys, enabling a crafted local app to cause the system to become unresponsive and reboot on affected products: Windows 2000 SP4, XP SP2/SP3, Server 200...

CVE-1999-0700

CVE-1999-0700 describes a buffer overflow in Microsoft Phone Dialer (dialer.exe) triggered by a malformed dialer.ini entry. The NVD entry assigns a local attack vector, high complexity, and no authentication, with impact described as complete on confidentiality, integrity, and availability. Red H...

CVE-2001-0238

The CVE-2001-0238 entry concerns Microsoft Data Access Component Internet Publishing Provider (ID 8.103.2519.0 and earlier). The available connected documents describe that remote attackers can bypass Security Zone restrictions through WebDAV requests. The root cause details are not explicitly st...

CVE-2001-0347

The connected CERT/KB entry confirms a vulnerability in Microsoft Windows 2000 Telnet Service that permits remote authentication using domain accounts without specifying a domain name, by exploiting a wildcard domain search. The issue can lead to unauthorized domain-login or information leakage. ...

CVE-2001-0349

CVE-2001-0349 affects Microsoft Windows 2000, specifically the Telnet Service. The Telnet Service creates named pipes to share data between session handlers, using an algorithm to name pipes that is easily predictable, and it does not properly verify the pipe names. If a local attacker with acces...

CVE-2003-0812

CVE-2003-0812 corresponds to a stack-based buffer overflow in the Windows Workstation Service (WKSSVC.DLL) that can be exploited via RPC to achieve remote code execution through NetAddAlternateComputerName logging paths. Affected platforms include Windows 2000 and Windows XP (and 64‑bit edition p...

CVE-2004-0116

CVE-2004-0116 maps to a Denial-of-Service in the RPCSS Service involved with DCOM activation. The issue is triggered by specially crafted activation requests that exhaust memory when the RPCSS service fails to reclaim discarded memory, leading to remote DoS on affected Windows versions. Affected ...

CVE-2004-0123

CVE-2004-0123 (ASN.1 “Double Free”) affects Windows platforms including NT 4.0, Windows 2000, Windows XP, and Windows Server 2003. The issue is a potential memory-management error caused by a possible double-free condition in the Microsoft ASN.1 Library, which could lead to memory corruption and,...

CVE-2004-0208

CVE-2004-0208 is a local privilege-elevation vulnerability in the Windows kernel/VDM subsystem. The Windows Virtual DOS Machine (VDM) component could allow an authenticated, locally logged-on attacker to gain kernel privileges by executing code in memory areas not properly validated when handling...

CVE-2004-1306

The connected advisories confirm a heap-based buffer overflow in winhlp32.exe that can be triggered by a crafted .hlp file, exposing remote code execution on affected Windows versions: Windows NT, Windows 2000 (SP4), Windows XP (SP2), and Windows Server 2003. Root cause: unsafe handling during ph...

CVE-2005-0057

Microsoft’s MS05-015 fixes a remote code execution flaw in the Hyperlink Object Library (Hlink.dll) affecting Windows 98, 2000, XP, and Server 2003. The vulnerability arises from an unchecked buffer when handling hyperlinks, potentially allowing arbitrary code execution if a user clicks a crafted...