Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-0096 1Microsoft 2Internet Information Server Internet Information Services Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 FrontPage Server Extensions (FPSE) in IIS 4.0 and 5.0 allows remote attackers to cause a denial of service via a malformed form, aka the "Malformed Web Form Submission" vulnerability.
CVE-2001-0083 1Microsoft 1Windows Media Services Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of...Show more Windows Media Unicast Service in Windows Media Services 4.0 and 4.1 does not properly shut down some types of connections, producing a memory leak that allows remote attackers to cause a denial of service via a series of severed connections, aka the "Severed Windows Media Server Connection" vulnerability.Show less
CVE-2001-0048 1Microsoft 1Windows 2000 Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious p...Show more The "Configure Your Server" tool in Microsoft 2000 domain controllers installs a blank password for the Directory Service Restore Mode, which allows attackers with physical access to the controller to install malicious programs, aka the "Directory Service Restore Mode Password" vulnerability.Show less
CVE-2001-0014 1Microsoft 1Windows 2000 Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Remote Data Protocol (RDP) in Windows 2000 Terminal Service does not properly handle certain malformed packets, which allows remote attackers to cause a denial of service, aka the "Invalid RDP Data" vulnerability.
CVE-2001-0006 1Microsoft 1Windows Nt Apr 16, 2026 Feb 12, 2001 N/A· v4 7.1 HIGH· v3 2.1 LOW· v2 The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to...Show more The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and disable Winsock network connectivity to cause a denial of service, aka the "Winsock Mutex" vulnerability.Show less
CVE-2001-0005 1Microsoft 1Powerpoint Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 6.2 MEDIUM· v2 Buffer overflow in the parsing mechanism of the file loader in Microsoft PowerPoint 2000 allows attackers to execute arbitrary commands.
CVE-2001-0004 1Microsoft 2Internet Information Server Internet Information Services Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a vari...Show more IIS 5.0 and 4.0 allows remote attackers to read the source code for executable web server programs by appending "%3F+.htr" to the requested URL, which causes the files to be parsed by the .HTR ISAPI extension, aka a variant of the "File Fragment Reading via .HTR" vulnerability.Show less
CVE-2001-0003 1Microsoft 4Office Windows 2000Windows Me+1 more Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials an...Show more Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability.Show less
CVE-2000-1090 1Microsoft 1Internet Information Server Apr 16, 2026 Feb 12, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft IIS for Far East editions 4.0 and 5.0 allows remote attackers to read source code for parsed pages via a malformed URL that uses the lead-byte of a double-byte character.
CVE-2000-1149 1Microsoft 1Windows Nt Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in RegAPI.DLL used by Windows NT 4.0 Terminal Server allows remote attackers to execute arbitrary commands via a long username, aka the "Terminal Server Login Buffer Overflow" vulnerability.
CVE-2000-1147 1Microsoft 1Internet Information Server Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to the "LANGUAGE" argument in a script tag.
CVE-2000-1139 1Microsoft 1Exchange Server Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known password, which could allow attackers to gain privileges, aka the "Exchange User Account" vulnerability.
CVE-2000-1113 1Microsoft 1Windows Media Player Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary commands via a malformed Active Stream Redirector (.ASX) file, aka the ".ASX Buffer Overrun" vulnerability.
CVE-2000-1112 1Microsoft 1Windows Media Player Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerabil...Show more Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow remote attackers to gain privileges via a skin that contains a malicious script, aka the ".WMS Script Execution" vulnerability.Show less
CVE-2000-1111 1Microsoft 1Windows 2000 Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Telnet Service for Windows 2000 Professional does not properly terminate incomplete connection attempts, which allows remote attackers to cause a denial of service by connecting to the server and not providing any input.
CVE-2000-1105 1Microsoft 1Indexing Service Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Index...Show more The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a script that remotely determines the existence of files on visiting Windows 2000 systems that have Indexing Services enabled.Show less
CVE-2000-1104 1Microsoft 2Internet Information Server Internet Information Services Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without...Show more Variant of the "IIS Cross-Site Scripting" vulnerability as originally discussed in MS:MS00-060 (CVE-2000-0746) allows a malicious web site operator to embed scripts in a link to a trusted site, which are returned without quoting in an error message back to the client. The client then executes those scripts in the same context as the trusted site.Show less
CVE-2000-1089 1Microsoft 2Windows 2000 Windows Nt Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.
CVE-2000-1088 1Microsoft 2Data Engine Sql Server Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Exten...Show more The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.Show less
CVE-2000-1087 1Microsoft 2Data Engine Sql Server Apr 16, 2026 Jan 9, 2001 N/A· v4 N/A· v3 4.6 MEDIUM· v2 The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Exte...Show more The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not properly restrict the length of a buffer before calling the srv_paraminfo function in the SQL Server API for Extended Stored Procedures (XP), which allows an attacker to cause a denial of service or execute arbitrary commands, aka the "Extended Stored Procedure Parameter Parsing" vulnerability.Show less

Previous 1...727728729...748 Next