Microsoft

Windows 2000

517 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2009-1926

  • EPSS 72.26%
  • Published 08.09.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small o...

9.3

CVE-2009-2498

  • EPSS 36.52%
  • Published 08.09.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files, which allows remote attackers to execute arbitrary code via a crafted (1) ...

8.5

CVE-2009-2499

  • EPSS 37.78%
  • Published 08.09.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute arbitrary code via an MP3 file with crafted metadata that triggers memory ...

9.3

CVE-2009-2519

  • EPSS 40.14%
  • Published 08.09.2009 22:30:00
  • Last modified 09.04.2025 00:30:58

The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system ...

9.3

CVE-2009-1133

  • EPSS 70.04%
  • Published 12.08.2009 17:30:00
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client for Mac 2.0, allows remote attackers to execute arbitrary code via unsp...

6.9

CVE-2009-1922

  • EPSS 1.89%
  • Published 12.08.2009 17:30:00
  • Last modified 09.04.2025 00:30:58

The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users ...

9.3

CVE-2009-1923

  • EPSS 49%
  • Published 12.08.2009 17:30:00
  • Last modified 09.04.2025 00:30:58

Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buf...

9.3

CVE-2009-1924

  • EPSS 19.27%
  • Published 12.08.2009 17:30:00
  • Last modified 09.04.2025 00:30:58

Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka "WINS Integer Overflow Vulnerability....

10

CVE-2009-1930

  • EPSS 50.86%
  • Published 12.08.2009 17:30:00
  • Last modified 09.04.2025 00:30:58

The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of ...

10

CVE-2009-2494

  • EPSS 60.59%
  • Published 12.08.2009 17:30:00
  • Last modified 09.04.2025 00:30:58

The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operation...