CVE-2005-0051

CVE-2005-0051 concerns the Windows Server service (srvsvc.dll) on Windows XP SP1/SP2, where an anonymous logon over a named pipe can disclose authentication-related information about users accessing shared resources. The vulnerability enables remote information disclosure without code execution. ...

CVE-2006-0488

The CVE-2006-0488 entry concerns the VDM (Virtual DOS Machine) emulation environment in Windows 2000, Windows XP SP2, and Windows Server 2003. The issue allows local users to read the first megabyte of memory, potentially exposing sensitive information, as demonstrated by dumper.asm. This describ...

CVE-2006-5585

CVE-2006-5585 is a local privilege-elevation vulnerability in the Client-Server Run-time Subsystem (CSRSS) of Microsoft Windows XP SP2 and Windows Server 2003. The issue arises from improper processing/validation of embedded file manifests by CSRSS, which could let a logged-on attacker run a craf...

CVE-2007-0933

The CVE-2007-0933 issue affects the D-Link DWL-G650+ wireless driver (version 6.0.0.18, Rev. A1) on Windows XP. It is a buffer overflow in the driver that can be triggered by a beacon frame containing a long TIM Information Element, leading to a denial of service (crash) and potentially arbitrary...

CVE-2013-1265

The CVE-2013-1265 entry describes a race condition in the kernel-mode driver win32k.sys that affects multiple Microsoft Windows platforms (XP SP2/SP3, Server 2003 SP2, Vista SP2, Server 2008 SP2/R2, and Windows 7 SP1). The underlying flaw allows local attackers to escalate privileges and read arb...

CVE-2013-1270

CVE-2013-1270 is a race condition in the Windows kernel-mode driver win32k.sys that enables local privilege escalation and the reading of arbitrary kernel memory. Affected products include Windows XP (SP2–SP3), Windows Server 2003 (SP2), Windows Vista (SP2), Windows Server 2008 (SP2–R2 SP1), and ...

CVE-2001-1570

Technical details about CVE-2001-1570 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2003-0897

The CVE-2003-0897 entry describes a local code-execution vulnerability in Windows XP related to CommCtl32.dll. The flaw arises when an attacker can send BCM_GETTEXTMARGIN or BCM_SETTEXTMARGIN button control messages to privileged applications, enabling arbitrary code execution on the affected sys...

CVE-2006-6602

CVE-2006-6602 affects explorer.exe in Microsoft Windows XP SP2 (Windows Explorer 6.00.2900.2180). A user-assisted remote attacker can cause a denial of service by presenting a crafted WMV file. Affected component: Windows Explorer. The connected documents provide the vulnerability description and...

CVE-2006-6723

The CVE-2006-6723 issue affects the Workstation service in Microsoft Windows 2000 SP4 and Windows XP SP2, where a crafted NetrWkstaUserEnum RPC request with a large maxlen value can cause a denial of service through memory consumption. The root cause is tied to how the Workstation service process...

CVE-2001-1571

The CVE-2001-1571 entry concerns the Windows XP Remote Desktop client, where the Remote Desktop user name is sent in cleartext. This behavior could allow an attacker to sniff and obtain terminal server user account names over the network. The connected Red Hat and CVE references reiterate the sam...

CVE-2002-2117

Microsoft Windows XP is affected by CVE-2002-2117, where remote attackers can cause a denial of service (CPU consumption) by flooding UDP port 500 (ISAKMP). The Red Hat and NVD entries describe the same impact. No concrete remediation or patch details are provided in the connected documents; PT-2...

CVE-2004-2307

CVE-2004-2307 affects Microsoft Internet Explorer 6.0.2600 on Windows XP. The vulnerability allows remote attackers to cause a denial of service (browser crash) by using a shell: URI with double backslashes (\) in an HTML tag (e.g., IFRAME or A). The connected documents confirm the attack vector ...

CVE-2004-2365

CVE-2004-2365 affects Windows XP and Windows Server 2003. The issue is a memory leak in the operating system that allows a local user to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount. The provided documents...

CVE-2005-0954

CVE-2005-0954 affects Windows 2000 SP1, specifically Windows Explorer and Internet Explorer, where a malformed Windows Metafile (WMF) can be used by a remote attacker to consume CPU and cause a denial of service. The vulnerability is described as enabling a remote DoS via WMF parsing, with the NV...

CVE-2005-4697

The CVE-2005-4697 entry concerns the Microsoft Wireless Zero Configuration (WZCS) system. It states that local users can access WEP keys and WPA PMKs via WZCQueryInterface in wzcsapi.dll, due to exposure through this API. Affected software/component: Microsoft WZCS and wzcsapi.dll; vulnerability ...

CVE-2009-1511

This entry concerns CVE-2009-1511: a vulnerability in Microsoft GDI+ PNG parsing on Windows XP SP3 . The issue arises when processing a PNG image containing a specific large btChunkLen value, which can trigger an infinite loop in GDI+ and lead to a remote denial of service . The affected componen...

CVE-2010-0818

The CVE-2010-0818 issue affects the MPEG-4 codec in Windows Media codecs on Windows XP SP2/SP3, Server 2003 SP2, Vista SP1/SP2, and Server 2008 Gold/SP2. Root cause: a buffer/handling flaw in the MPEG-4 codec when processing specially crafted media content with MPEG-4 video encoding, allowing rem...

CVE-2002-0974

The CVE-2002-0974 entry documents a vulnerability in the Windows XP Help and Support Center where a remote attacker can cause deletion of arbitrary files by visiting a crafted link to the hcp: protocol that accesses uplddrvinfo.htm. Affected product is Windows XP Help and Support Center; the unde...

CVE-2002-2105

CVE-2002-2105 affects Microsoft Windows XP. A local attacker can prevent the system from booting by corrupting the explorer.exe.manifest file, per the description. The entry specifies a local access vector, low complexity, no authentication required, and a partial impact on availability with no c...

CVE-2007-2219

CVE-2007-2219 is a remote code-execution flaw in the Win32 API present on Windows 2000 SP4, XP SP2, and Server 2003 SP1/SP2. The vulnerability stems from improper validation of parameters passed to a Win32 API function, enabling an attacker to execute arbitrary code by convincing a user to view a...

CVE-2007-2374

Technical details are not publicly available in the provided documents; no affected products, vulnerable components, vectors, or fixes are specified. Monitor for updates.

CVE-2008-4323

CVE-2008-4323 affects Windows XP SP3: Windows Explorer may crash (DoS) when handling a specially crafted .ZIP file. The vulnerability is described as user-assisted (not remote) and affects Explorer functionality, with no details on a patch or workaround provided in the connected documents. No add...

CVE-2003-0306

Summary: CVE-2003-0306 is a buffer overflow in Windows XP’s EXPLORER.EXE triggered by a specially crafted desktop.ini containing a long .ShellClassInfo parameter, allowing arbitrary code execution as the logged-in XP user. The issue is detailed in multiple sources and is tied to the MS03-027 bull...

CVE-2006-1475

CVE-2006-1475 affects Windows XP SP2: Windows Firewall fails to produce application alerts when an executable is launched via NTFS Alternate Data Streams (ADS) filename:stream syntax. Root cause is the ADS filename:stream handling bypassing the normal firewall alert mechanism, enabling a local at...

CVE-2006-6601

The CVE-2006-6601 entry concerns Windows Media Player 10.0.0.4036 on Windows XP SP2. Affected component: MIDI (.MID) file handling. Root cause: a malformed header chunk (no track chunks) in a MIDI file, with potential issues in the number of tracks or time division fields set to 0, enabling a use...

CVE-2009-0119

CVE-2009-0119 affects Microsoft Windows XP SP3. A buffer overflow in handling a crafted .chm file can allow remote attackers to cause memory corruption and application crash, with possible arbitrary code execution. Documented impact includes denial of service and potential code execution; no expl...

CVE-2002-2283

Microsoft Windows XP with Fast User Switching (FUS) enabled is affected. When a user is removed from the administrator group, the system does not remove the "show processes from all users" privilege, allowing that user to view processes of other users. The description documents this vulnerability...

CVE-2004-2176

The CVE-2004-2176 entry concerns the Internet Connection Firewall (ICF) in Windows XP SP2. The issue arises because ICF is configured by default to trust sessmgr.exe, enabling local users to use sessmgr.exe to open a local listening port that bypasses ICF access controls. Documents do not provide...

CVE-2006-3209

The CVE concerns Microsoft Windows XP Task Scheduler (at.exe): each scheduled process can be spawned with SYSTEM permissions, enabling local privilege escalation. Affected component is the Task Scheduler on Windows XP; the underlying issue is that scheduled processes inherit SYSTEM-level rights, ...

CVE-2008-0322

The CVE-2008-0322 issue affects the I2O Utility Filter driver (i2omgmt.sys) version 5.1.2600.2180 on Windows XP. The .\

CVE-2005-2765

The CVE-2005-2765 entry concerns the Windows Firewall UI not properly displaying certain malformed Windows Registry entries. The underlying issue is an information-hiding condition that could enable attackers with already elevated (administrator) privileges to obscure activity when monitoring exc...

CVE-2007-1537

CVE-2007-1537 affects NDISTAPI.sys in Windows XP SP2 and Windows Server 2003 SP1, where the device exposes weak permissions that allow local users to write to the device and trigger a denial of service. The documented exploit involves using an IRQL to acquire a spinlock on paged memory via NdisTa...

CVE-2005-1207

CVE-2005-1207 is a buffer overflow in the Web Client service (WebDAV handling) of Microsoft Windows XP and Windows Server 2003. The flaw allows remote code execution when an attacker who has valid logon credentials submits a crafted WebDAV request; no anonymous access is mentioned in the provided...

CVE-2010-3140

The vulnerability CVE-2010-3140 affects Windows XP SP3, specifically an untrusted search path in Windows Internet Connection Settings. The issue can allow local users, and possibly remote attackers, to run arbitrary code via a Trojan horse schannel.dll located in the same folder as an ISP file, e...

CVE-2001-0860

The CVE-2001-0860 entry documents a vulnerability in Terminal Services Manager MMC on Windows 2000 and Windows XP where the service trusts the Client Address (IP) provided by the client instead of deriving it from packet headers. This enables IP address spoofing (e.g., via NAT). Root cause: the t...

CVE-2006-4066

The CVE-2006-4066 entry affects the Graphical Device Interface Plus library (gdiplus.dll) in Microsoft Windows XP SP2. The vulnerability allows context-dependent attackers to cause a denial of service (application crash) by feeding images that trigger a divide-by-zero error, demonstrated via an I...

CVE-2005-1792

The connected Seebug document confirms CVE-2005-1792 affects Microsoft Windows XP via the WMI service. The vulnerability allows remote attackers to trigger a denial-of-service by causing memory leaks and system unresponsiveness because security contexts are created faster than RPC cache entries c...