CVE-2005-1980

CVE-2005-1980 corresponds to the MSDTC TIP Denial of Service vulnerability described in Microsoft Security Bulletin MS05-051 (CAN-2005-1980). The flaw affects MSDTC TIP processing, enabling a remote attacker to cause the DTC service to stop responding by sending a crafted TIP message. Microsoft l...

CVE-2006-1313

CVE-2006-1313 is the Microsoft JScript memory corruption remote code execution vulnerability documented in MS06-023. It affects JScript in Windows 98/Me, Windows 2000 SP4, Windows XP (incl. SP1/SP2), and Windows Server 2003 families, including x64/Itanium variants, where JScript may release objec...

CVE-2006-4689

CVE-2006-4689 covers a NetWare Driver Denial of Service in the Microsoft Client Service for NetWare (CSNW). Affected systems include Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 with SP1. The vulnerability arises from an unchecked handling of a crafted network message that could caus...

CVE-2006-5758

The Graphics Rendering Engine in Microsoft Windows 2000 (through 2000 SP4) and Windows XP (through SP2) is vulnerable to a flaw where GDI Kernel structures are mapped to a global shared memory section with insecure read-only permissions. While intended to be read-only, other processes can remap t...

CVE-2008-0088

Summary: CVE-2008-0088 describes a denial-of-service in Microsoft Active Directory and ADAM caused by improper validation of crafted LDAP requests. Affected components include Active Directory on Windows 2000 Server and Windows Server 2003, and ADAM on Windows XP/Server 2003. The underlying root ...

CVE-2008-3465

A heap-based buffer overflow exists in the GDI API of Microsoft Windows (versions 2000 SP4, XP SP2/SP3, Server 2003 SP1/SP2, Vista Gold/SP1, and Server 2008). The vulnerability is triggered when a third-party application uses a specific Microsoft API to copy a WMF image file containing a malforme...

CVE-2010-0478

CVE-2010-0478 is a stack-based buffer overflow in the Windows Media Unicast Service (NUMS.exe) of Windows Media Services on Windows 2000 Server SP4. The vulnerability allows remote code execution via specially crafted transport information packets. Public references indicate exploitation through ...

CVE-1999-0700

CVE-1999-0700 describes a buffer overflow in Microsoft Phone Dialer (dialer.exe) triggered by a malformed dialer.ini entry. The NVD entry assigns a local attack vector, high complexity, and no authentication, with impact described as complete on confidentiality, integrity, and availability. Red H...

CVE-2000-0834

CVE-2000-0834 : The Windows 2000 Telnet client defaults to NTLM authentication, enabling remote attackers to capture and replay the NTLM challenge/response via a telnet:// URL pointing at a malicious server. The vulnerability affects the Windows 2000 Telnet client’s NTLM authentication behavior a...

CVE-2004-1080

Summary: CVE-2004-1080 describes a remote memory overwrite in the Windows WINS service (wins.exe) via a crafted WINS replication packet sent to TCP port 42, which could allow arbitrary code execution. Affected products: Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003...

CVE-2005-1935

CVE-2005-1935 documents a heap-based buffer overflow in the BERDecBitString function of Microsoft's ASN.1 library (MSASN1.DLL). The overflow occurs when processing nested constructed bit strings, leading to a realloc of a non-null pointer and potential overwrite of freed memory, demonstrated via ...

CVE-2006-1311

CVE-2006-1311 is a remote code execution vulnerability in Microsoft RichEdit. The RichEdit components in Windows 2000 SP4, XP SP2, 2003 SP1 and Office suites (2000 SP3, XP SP3, 2003 SP2) plus Office for Mac 2004 and Learning Essentials are affected. The flaw arises from insufficient validation wh...

CVE-2007-6043

CVE-2007-6043 concerns the CryptGenRandom generator on Windows 2000, which produces predictable values. The description states this can let context-dependent attackers weaken cryptographic mechanisms, demonstrated via attacks on forward and backward security related to the use of eight RC4 instan...

CVE-2009-0083

CVE-2009-0083 is a Windows kernel local privilege escalation vulnerability (Windows 2000 SP4, XP SP2/SP3, Server 2003 SP1) caused by improper handling of specially crafted invalid pointers. A local attacker could gain kernel privileges via an application that triggers use of an invalid pointer. M...

CVE-2009-2516

The Windows kernel in Windows 2000 SP4 , XP SP2/SP3 , Server 2003 SP2 , Vista Gold/SP1 , and Server 2008 Gold fails to properly validate data sent from user mode. This flaw allows a local attacker to gain privileges by providing a crafted PE .exe file that triggers a NULL pointer dereference duri...

CVE-2009-2529

CVE-2009-2529 affects Microsoft Internet Explorer versions 5.01 SP4, 6, 6 SP1, 7, and 8. The vulnerability arises from improper argument validation for unspecified variables in HTML component handling, enabling remote code execution via a crafted HTML document. Public information in connected KB ...

CVE-1999-0372

The CVE concerns the BackOffice Server installer leaking credentials: account names and passwords are written to a setup file (reboot.ini) and not deleted after installation. This exposes partial confidentiality risk on local execution, per the CVSS metrics (Low base score, Local attack vector, n...

CVE-2001-1347

CVE-2001-1347 affects Windows 2000. The vulnerability arises when a local user sets a hardware breakpoint that is handled via global debug registers, which can cause other processes to terminate due to an exception and may allow hijacking of resources such as named pipes. The available sources de...

CVE-2002-0070

CVE-2002-0070 describes a buffer overflow in the Windows Shell (the Windows Desktop environment) that can allow arbitrary code execution. The vulnerability stems from an unchecked buffer in the URL handler mapping for applications that have been partially removed; if an application with custom UR...

CVE-2002-1256

CVE-2002-1256 describes a flaw in SMB signing in Windows 2000/XP that lets an attacker disable SMB signing in a session and inject unsigned data, potentially modifying group policy information sent from a domain controller. Affected products are Microsoft Windows 2000 and Windows XP; the root cau...

CVE-2005-3174

CVE-2005-3174 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The vulnerability allows a user to log on to the domain when their password has expired if the fully qualified domain name (FQDN) is exactly 8 characters long. Connected sources confirm the affected OS and condition bu...

CVE-2006-0376

CVE-2006-0376 affects the 802.11 wireless client in certain Windows family systems (Windows 2000, XP, Server 2003). The vulnerability arises because the client does not warn users when it associates with an ad hoc (peer-to-peer) station, or when a station in ad hoc mode associates with it. This o...

CVE-2006-3440

CVE-2006-3440 is a remote code execution vulnerability in the Winsock API (buffer overflow) affecting Windows 2000 SP4, XP SP1/SP2, XP Pro x64, Windows Server 2003 and Itanium/x64 variants. Exploitation requires convincing a user to open a specially crafted file or visit a crafted website, enabli...

CVE-2008-1457

CVE-2008-1457 describes a remote code execution vulnerability in the Microsoft Windows Event System. The flaw occurs when creating per-user subscriptions, allowing an attacker with valid logon credentials to craft a subscription request that could run arbitrary code with system privileges. Affect...

CVE-2009-0094

This CVE describes WPAD/ISATAP spoofing via WINS/DNS server vulnerabilities in Windows 2000 SP4 and Windows Server 2003 SP1/SP2. The root cause is lack of restrictions on registering WPAD/ISATAP names in WINS (and WPAD in DNS in related entries), enabling remote authenticated actors to hijack WPA...

CVE-2010-0491

CVE-2010-0491 is the IE HTML Object Memory Corruption vulnerability (Use-after-free) affecting Internet Explorer 5.01 SP4, 6, and 6 SP1. Exploitation requires crafting a page with an onreadystatechange handler to trigger arbitrary code execution; Microsoft documented this as part of MS10-018 and ...

CVE-1999-0595

CVE-1999-0595 affects Windows NT: during shutdown the system page file is not cleared, potentially leaving sensitive information in the paging file. This is described across multiple sources (NVD entry and various CVE records). The available documents indicate a confidentiality impact (partial) w...

CVE-2001-0350

Summary: CVE-2001-0350 affects Microsoft Windows 2000 Telnet Service, where the service creates named pipes with predictable names and does not verify them, enabling unprivileged local users to execute arbitrary code in the Local System context by providing a malicious named pipe and triggering c...

CVE-2001-0351

The CVE-2001-0351 entry concerns Microsoft Windows 2000 Telnet Service. The vulnerability allows an unprivileged local user to invoke a system call that terminates an existing Telnet session, producing a denial-of-service condition. Affected software is Windows 2000 with the Telnet Service; the u...

CVE-2001-0663

The CVE-2001-0663 entry concerns Terminal Server in Windows NT and Windows 2000. Affected component: Terminal Server; vulnerability exploited by a sequence of invalid Remote Desktop Protocol (RDP) packets to cause a denial of service. Root cause: handling of invalid/malformed RDP packets leads to...

CVE-2005-1981

CVE-2005-1981 refers to a denial-of-service vulnerability in the Kerberos handling of Windows 2000 Server and Windows Server 2003 domain controllers (CAN-2005-1981). The issue allows a remote, authenticated attacker to send a crafted Kerberos message that can cause the domain controller’s authent...

CVE-2005-2126

The CVE-2005-2126 entry concerns a tampering vulnerability in the Windows FTP client. Public documentation (MS05-044/MSKB 905495 and CERT 415828) describes that when Enable Folder View for FTP Sites is enabled and a user initiates an FTP transfer, a remote server can craft file names to cause the...

CVE-2006-2334

The CVE-2006-2334 issue affects the Windows NT kernel user-mode path conversion: the RtlDosPathNameToNtPathName_U API in NTDLL.DLL on Windows 2000 SP4 and XP SP2 mishandles DOS-style paths with trailing spaces, allowing context-dependent attackers to create files that aren’t accessible via the ex...

CVE-2007-3028

CVE-2007-3028 describes a denial-of-service vulnerability in Windows 2000 Server SP4 where the LDAP service in Active Directory fails to properly validate the number of convertible attributes in client-sent LDAP requests. The linked materials indicate this is a separate issue from CVE-2007-0040, ...

CVE-2009-2523

CVE-2009-2523 affects Microsoft Windows 2000 SP4 License Logging Server (llssrv.exe). The vulnerability is a remote code execution via a heap-based buffer overflow in the LlsrLicenseRequestW RPC handler when processing an RPC string that lacks a terminating null. Exploitation is unauthenticated a...

CVE-2009-4210

CVE-2009-4210 describes memory corruption in the Microsoft Windows Indeo codec exposed by crafted media content, affecting Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The OpenVAS entries corroborate multiple vulnerabilities in the Indeo codec and list CVE-2009-4210 among the affected vulne...

CVE-2010-0235

CVE-2010-0235 is the Windows Kernel Symbolic Link Value Vulnerability. The provided documents confirm a denial-of-service impact (system becomes unresponsive and reboots) caused by improper validation of symbolic link values when created by the Windows kernel. Affected products (per MS10-021 and ...

CVE-2000-0771

CVE-2000-0771 refers to a Windows 2000 vulnerability where a local user can corrupt the local security policy by processing malformed RPC traffic, described as the “Local Security Policy Corruption.” The issue is a local-privilege-consistency disruption with a documented impact of partial availab...

CVE-2001-1517

CVE-2001-1517 affects Windows 2000 RunAs (runas.exe). The issue is that cleartext authentication data is stored in memory, potentially allowing a attacker to recover usernames and passwords by a process sharing the same memory page after a RunAs operation ends. Evidence in connected sources confi...

CVE-2002-0694

The CVE-2002-0694 issue is tied to an unchecked buffer in Windows Help (Q323255) that affected Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP. Root cause: a vulnerability in the HTML Help facility could allow a remote attack...

CVE-2004-0116

CVE-2004-0116 maps to a Denial-of-Service in the RPCSS Service involved with DCOM activation. The issue is triggered by specially crafted activation requests that exhaust memory when the RPCSS service fails to reclaim discarded memory, leading to remote DoS on affected Windows versions. Affected ...

CVE-2007-2218

CVE-2007-2218 maps to a heap corruption/remote code execution vulnerability in the Windows Schannel security package. MS07-031 describes an issue where server-sent digital signatures are not adequately checked during the SSL handshake, allowing a remote attacker to execute code (browser or app us...

CVE-2009-1125

CVE-2009-1125 corresponds to the Windows Driver Class Registration Vulnerability. The Microsoft Windows kernel does not properly validate an argument passed to a Windows kernel system call, enabling local privilege escalation if a crafted user-mode application is run. Affected products include Wi...

CVE-2010-0238

CVE-2010-0238 corresponds to the Windows Kernel Registry Key Vulnerability. A denial-of-service occurs when the Windows kernel validates registry keys, enabling a crafted local app to cause the system to become unresponsive and reboot on affected products: Windows 2000 SP4, XP SP2/SP3, Server 200...

CVE-2001-0238

The CVE-2001-0238 entry concerns Microsoft Data Access Component Internet Publishing Provider (ID 8.103.2519.0 and earlier). The available connected documents describe that remote attackers can bypass Security Zone restrictions through WebDAV requests. The root cause details are not explicitly st...

CVE-2001-1244

Technical details such as affected products, versions, and root cause are not publicly provided in the connected documents. Monitor CVE-2001-1244 updates for concrete details.

CVE-2005-0057

Microsoft’s MS05-015 fixes a remote code execution flaw in the Hyperlink Object Library (Hlink.dll) affecting Windows 98, 2000, XP, and Server 2003. The vulnerability arises from an unchecked buffer when handling hyperlinks, potentially allowing arbitrary code execution if a user clicks a crafted...

CVE-2006-0020

CVE-2006-0020 describes a WMF parsing memory corruption affecting Internet Explorer on Windows platforms (e.g., IE 5.01 SP4 on 2000 SP4; 5.5 SP2 on Millennium) where a crafted WMF file with manipulated header size (potential integer overflow) can crash the process and may allow code execution. Th...

CVE-2006-3873

CVE-2006-3873 describes a heap-based buffer overflow in URLMON.DLL of Microsoft Internet Explorer 6 SP1 on Windows 2000/XP SP1, exploitable via a long URL in a GZIP-compressed HTTP-redirected web page. The issue is tied to an incomplete fix for CVE-2006-3869 and is mitigated by applying the MS06-...

CVE-2010-0023

CVE-2010-0023 affects the Client/Server Runtime Subsystem (CSRSS) on Windows 2000 SP4, XP SP2/SP3, and Server 2003 SP2. The vulnerability stems from CSRSS not properly terminating processes after user logout, enabling a local attacker to gain privileges or access sensitive information via a craft...