Priority CRITICAL 97KEV
Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote atta…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.5108 · Published 2009-05-29 · No fix listed CWE-158
Priority CRITICAL 97KEV
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4,…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.76576 · Published 2009-07-07 · No fix listed CWE-121
Priority CRITICAL 93KEV
Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.55923 · Published 2015-04-21 · No fix listed
Priority CRITICAL 93KEV
NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.34651 · Published 2013-11-27 · No fix listed
Priority HIGH 84
DNSAPI.dll in the DNS client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly process DN…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.62495 · Published 2011-04-13 · No fix listed CWE-20
Priority HIGH 84
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a differen…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.85075 · Published 2006-08-09 · No fix listed
Priority HIGH 83
The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modifi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.79801 · Published 2004-12-01 · No fix listed
Priority HIGH 82
The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate fields in an SMB request, which allo…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.7572 · Published 2010-08-11 · No fix listed CWE-20
Priority HIGH 82
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary c…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.77664 · Published 2007-04-13 · No fix listed CWE-119
Priority HIGH 80
Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 200…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.68084 · Published 2011-02-16 · No fix listed CWE-119
Priority HIGH 78
The MPC::HexToNum function in helpctr.exe in Microsoft Windows Help and Support Center in Windows XP and Windows Server 2003 does not properly handle malformed escape sequences, which allows remote attackers to bypass th…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.71148 · Published 2010-06-14 · No fix listed CWE-78
Priority HIGH 78
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length va…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.73147 · Published 2007-03-30 · No fix listed CWE-119
Priority HIGH 78
Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.61963 · Published 2006-08-09 · No fix listed
Priority HIGH 78
Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/Lo…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.98484 · Published 2003-07-17 · No fix listed
Priority HIGH 77
Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to exec…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.67888 · Published 2010-04-14 · No fix listed CWE-119
Priority HIGH 77
Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped)…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.603 · Published 2004-10-16 · No fix listed
Priority HIGH 76
Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.57297 · Published 2006-08-09 · No fix listed
Priority HIGH 76
Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enha…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.57383 · Published 2004-10-16 · No fix listed
Priority HIGH 75
vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by refer…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.86634 · Published 2010-03-03 · No fix listed CWE-94
Priority HIGH 75
Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary code via a crafted SNMP packet, aka "SNMP…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.5375 · Published 2006-12-12 · No fix listed
Priority HIGH 75
The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.86093 · Published 2005-12-28 · No fix listed CWE-20
Priority HIGH 74
The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.78674 · Published 2010-02-10 · No fix listed CWE-20
Priority HIGH 74
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbi…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.82241 · Published 2004-02-11 · No fix listed
Priority HIGH 74
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 200…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.85602 · Published 2004-04-16 · No fix listed
Priority HIGH 73
Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code via a long first argument to the GetDetails…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.55906 · Published 2008-09-10 · No fix listed CWE-119
Load more