Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-0875 1Microsoft 1Internet Explorer Apr 16, 2026 Nov 26, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe t...Show more Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.Show less
CVE-2001-0909 1Microsoft 1Windows Xp Apr 16, 2026 Nov 21, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL.
CVE-2001-0904 1Microsoft 1Internet Explorer Apr 16, 2026 Nov 20, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more ea...Show more Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients.Show less
CVE-2001-0902 1Microsoft 1Internet Information Services Apr 16, 2026 Nov 20, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
CVE-2001-0724 1Microsoft 1Internet Explorer Apr 16, 2026 Nov 14, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have...Show more Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of CVE-2001-0664.Show less
CVE-2001-0723 1Microsoft 1Internet Explorer Apr 16, 2026 Nov 14, 2001 N/A· v4 N/A· v3 6.4 MEDIUM· v2 Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."
CVE-2001-0718 1Microsoft 2Excel Powerpoint Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the documen...Show more Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.Show less
CVE-2001-0712 1Microsoft 1Internet Explorer Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MI...Show more The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text (.txt), JPEG (.jpg), etc.Show less
CVE-2001-0667 1Microsoft 1Internet Explorer Apr 16, 2026 Oct 30, 2001 N/A· v4 7.3 HIGH· v3 7.5 HIGH· v2 Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbi...Show more Internet Explorer 6 and earlier, when used with the Telnet client in Services for Unix (SFU) 2.0, allows remote attackers to execute commands by spawning Telnet with a log file option on the command line and writing arbitrary code into an executable file which is later executed, aka a new variant of the Telnet Invocation vulnerability as described in CVE-2001-0150.Show less
CVE-2001-0666 1Microsoft 1Exchange Server Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.
CVE-2001-0665 1Microsoft 1Ie Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations w...Show more Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the "HTTP Request Encoding vulnerability."Show less
CVE-2001-0664 1Microsoft 1Internet Explorer Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which...Show more Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing vulnerability."Show less
CVE-2001-0662 1Microsoft 1Windows Nt Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.
CVE-2001-0660 1Microsoft 1Exchange Server Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).
CVE-2001-0545 1Microsoft 1Internet Information Server Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length.
CVE-2001-0544 1Microsoft 1Internet Information Services Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 2.1 LOW· v2 IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table.
CVE-2001-0540 1Microsoft 1Terminal Server Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.
CVE-2001-0505 1Microsoft 1Services Apr 16, 2026 Oct 30, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.
CVE-2001-0709 1Microsoft 1Internet Information Server Apr 16, 2026 Sep 20, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode.
CVE-2001-0659 1Microsoft 1Windows 2000 Apr 16, 2026 Sep 20, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via a malformed IrDA packet.

Previous 1...864865866...891 Next