Microsoft

Windows 2000

517 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2006-1311

  • EPSS 73.65%
  • Published 13.02.2007 20:28:00
  • Last modified 09.04.2025 00:30:58

The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute ar...

7.6

CVE-2007-0026

  • EPSS 52.41%
  • Published 13.02.2007 20:28:00
  • Last modified 09.04.2025 00:30:58

The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.

9.3

CVE-2007-0214

  • EPSS 62.47%
  • Published 13.02.2007 20:28:00
  • Last modified 09.04.2025 00:30:58

The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.

7.8

CVE-2006-6723

  • EPSS 57.16%
  • Published 26.12.2006 20:28:00
  • Last modified 09.04.2025 00:30:58

The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) via a large maxlen value in an NetrWkstaUserEnum RPC request.

6.9

CVE-2006-6696

  • EPSS 7.48%
  • Published 22.12.2006 02:28:00
  • Last modified 09.04.2025 00:30:58

Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Serv...

7.5

CVE-2006-5584

  • EPSS 52.93%
  • Published 13.12.2006 01:28:00
  • Last modified 09.04.2025 00:30:58

The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS.

6.1

CVE-2006-6296

Exploit
  • EPSS 26.76%
  • Published 05.12.2006 11:28:00
  • Last modified 09.04.2025 00:30:58

The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request...

5

CVE-2006-5988

  • EPSS 18.92%
  • Published 20.11.2006 21:07:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in Windows 2000 Advanced Server SP4 running Active Directory allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain VulnDisco Pack module. NOTE: the provenance of this informa...

7.5

CVE-2006-4688

  • EPSS 82.09%
  • Published 14.11.2006 22:07:00
  • Last modified 09.04.2025 00:30:58

Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerabil...

5

CVE-2006-4689

  • EPSS 67.87%
  • Published 14.11.2006 22:07:00
  • Last modified 09.04.2025 00:30:58

Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, ...