Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-1219 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 20, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft Internet Explorer 6.0 and earlier allows malicious website operators to cause a denial of service (client crash) via JavaScript that continually refreshes the window via self.location.
CVE-2001-1218 1Microsoft 1Ie Apr 16, 2026 Dec 20, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 Microsoft Internet Explorer for Unix 5.0SP1 allows local users to possibly cause a denial of service (crash) in CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window.
CVE-2001-0879 1Microsoft 4Sql Server Windows 2000Windows Nt+1 more Apr 16, 2026 Dec 20, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.
CVE-2001-0877 1Microsoft 4Windows 98 Windows 98seWindows Me+1 more Apr 16, 2026 Dec 20, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine t...Show more Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system.Show less
CVE-2001-0876 1Microsoft 4Windows 98 Windows 98seWindows Me+1 more Apr 16, 2026 Dec 20, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive with a long Location URL.
CVE-2001-0542 1Microsoft 1Sql Server Apr 16, 2026 Dec 20, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime fo...Show more Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.Show less
CVE-2001-1200 1Microsoft 1Windows Xp Apr 16, 2026 Dec 17, 2001 N/A· v4 N/A· v3 7.2 HIGH· v2 Microsoft Windows XP allows local users to bypass a locked screen and run certain programs that are associated with Hot Keys.
CVE-2001-0727 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 14, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open...Show more Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the "File Execution Vulnerability."Show less
CVE-2001-0874 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 13, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verifica...Show more Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability.Show less
CVE-2001-1186 1Microsoft 1Internet Information Services Apr 16, 2026 Dec 11, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft IIS 5.0 allows remote attackers to cause a denial of service via an HTTP request with a content-length value that is larger than the size of the request, which prevents IIS from timing out the connection.
CVE-2001-0951 1Microsoft 1Windows 2000 Apr 16, 2026 Dec 7, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Windows 2000 allows remote attackers to cause a denial of service (CPU consumption) by flooding Internet Key Exchange (IKE) UDP port 500 with packets that contain a large number of dot characters.
CVE-2001-0860 1Microsoft 2Windows 2000 Windows Xp Apr 16, 2026 Dec 6, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP ad...Show more Terminal Services Manager MMC in Windows 2000 and XP trusts the Client Address (IP address) that is provided by the client instead of obtaining it from the packet headers, which allows clients to spoof their public IP address, e.g. through a Network Address Translation (NAT).Show less
CVE-2001-0807 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 6, 2001 N/A· v4 N/A· v3 2.6 LOW· v2 Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file.
CVE-2001-0726 1Microsoft 1Exchange Server Apr 16, 2026 Dec 6, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Excha...Show more Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.Show less
CVE-2001-0722 1Microsoft 1Internet Explorer Apr 16, 2026 Dec 6, 2001 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the "First Cookie Handling Vulnerability."
CVE-2001-0721 1Microsoft 4Windows 98 Windows 98seWindows Me+1 more Apr 16, 2026 Dec 6, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request.
CVE-2001-0719 1Microsoft 1Windows Media Player Apr 16, 2026 Dec 6, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.
CVE-2001-0663 1Microsoft 2Windows 2000 Windows Nt Apr 16, 2026 Dec 6, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.
CVE-2001-0945 1Microsoft 1Outlook Express Apr 16, 2026 Dec 3, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.
CVE-2001-0919 1Microsoft 1Internet Explorer Apr 16, 2026 Nov 26, 2001 N/A· v4 N/A· v3 5.1 MEDIUM· v2 Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript.

Previous 1...863864865...891 Next