Priority CRITICAL 100KEV
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98751 · Published 2008-10-23 · No fix listed CWE-119
Priority CRITICAL 97KEV
Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote atta…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.5108 · Published 2009-05-29 · No fix listed CWE-158
Priority CRITICAL 93KEV
The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access t…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.28735 · Published 2010-01-21 · No fix listed
Priority CRITICAL 93KEV
The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.04878 · Published 2009-06-10 · No fix listed
Priority CRITICAL 93KEV
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.07214 · Published 2004-07-14 · No fix listed CWE-120
Priority CRITICAL 93KEV
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a han…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.04919 · Published 2003-04-02 · No fix listed CWE-269
Priority CRITICAL 86
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain priv…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.93106 · Published 2005-08-10 · No fix listed
Priority HIGH 84
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a differen…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.85075 · Published 2006-08-09 · No fix listed
Priority HIGH 84
Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.85698 · Published 2001-09-18 · No fix listed
Priority HIGH 83
Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.79962 · Published 2006-11-14 · No fix listed
Priority HIGH 83
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modifi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.79801 · Published 2004-12-01 · No fix listed
Priority HIGH 83
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large num…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.58133 · Published 2003-04-02 · Fixed CWE-190
Priority HIGH 82
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary c…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.77664 · Published 2007-04-13 · No fix listed CWE-119
Priority HIGH 81
Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.73267 · Published 2005-04-13 · No fix listed
Priority HIGH 81
Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.74639 · Published 2001-01-22 · No fix listed
Priority HIGH 81
Buffer overflow in IIS 4.0 allows remote attackers to cause a denial of service via a malformed request for files with .HTR, .IDC, or .STM extensions.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.74651 · Published 2000-06-02 · No fix listed CWE-119
Priority HIGH 80
The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers to execute arbitrary code via a long URL (DataURL parameter) that tri…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.80544 · Published 2010-03-31 · No fix listed CWE-94
Priority HIGH 80
The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrar…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.67822 · Published 2004-10-16 · No fix listed CWE-787
Priority HIGH 78
SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.44925 · Published 2009-01-14 · No fix listed CWE-94
Priority HIGH 78
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length va…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.73147 · Published 2007-03-30 · No fix listed CWE-119
Priority HIGH 78
Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.61963 · Published 2006-08-09 · No fix listed
Priority HIGH 78
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters,…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.635 · Published 2004-07-14 · No fix listed
Priority HIGH 78
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/Lo…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.98484 · Published 2003-07-17 · No fix listed
Priority HIGH 77
Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to exec…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.67888 · Published 2010-04-14 · No fix listed CWE-119
Priority HIGH 77
The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors relat…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.42329 · Published 2009-08-12 · No fix listed CWE-94
Load more