Windows 98se (Microsoft) - vulnerabilities (CVEs)

62 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2006-06-13. Vendor: Microsoft.

CVEs of Windows 98se

CVE-2006-1313 - CVSS 6.8 (medium), 2006-06-13: Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in…
CVE-2006-2376 - CVSS 7.5 (high), 2006-06-13: Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via…
CVE-2006-0012 - CVSS 5.1 (medium), 2006-04-12: Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary…
CVE-2006-0006 - CVSS 9.3 (critical), 2006-02-14: Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and…
CVE-2006-0010 - CVSS 9.3 (critical), 2006-01-10: Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote…
CVE-2006-0020 - CVSS 9.3 (critical), 2006-01-10: An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly…
CVE-2006-0143 - CVSS 7.5 (high), 2006-01-09: Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing…
CVE-2005-0058 - CVSS 7.5 (high), 2005-08-10: Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and…
CVE-2005-2388 - CVSS 7.2 (high), 2005-07-27: Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.
CVE-2005-1212 - CVSS 7.5 (high), 2005-06-14: Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo,…
CVE-2005-1214 - CVSS 5.1 (medium), 2005-06-14: Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.
CVE-2005-1793 - CVSS 2.6 (low), 2005-06-01: User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon…
CVE-2005-0044 - CVSS 7.5 (high), 2005-05-02: The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for…
CVE-2005-0059 - CVSS 10 (critical), 2005-05-02: Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted…
CVE-2005-0063 - CVSS 7.5 (high), 2005-05-02: The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to…
CVE-2005-0057 - CVSS 7.5 (high), 2005-05-02: The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an…
CVE-2005-0061 - CVSS 7.2 (high), 2005-05-02: The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.
CVE-2005-1191 - CVSS 5 (medium), 2005-05-02: The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe ("'") in the author name in a…
CVE-2005-0053 - CVSS 7.5 (high), 2005-05-02: Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
CVE-2005-0060 - CVSS 7.2 (high), 2005-05-02: Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain…
CVE-2005-1184 - CVSS 5 (medium), 2005-05-02: The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct…
CVE-2005-0416 - CVSS 7.5 (high), 2005-04-27: The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to…
CVE-2004-0790 - CVSS 5 (medium), 2005-04-12: Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the…
CVE-2004-0901 - CVSS 10 (critical), 2005-01-10: Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to…
CVE-2004-0571 - CVSS 10 (critical), 2005-01-10: Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri,…
CVE-2004-1305 - CVSS 5 (medium), 2004-12-23: The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause…
CVE-2004-1319 - CVSS 5 (medium), 2004-12-15: The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child…
CVE-2004-0597 - CVSS 10 (critical), 2004-11-23: Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images…
CVE-2004-0839 - CVSS 5 (medium), 2004-08-18: Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses…
CVE-2004-0230 - CVSS 5 (medium), 2004-08-18: TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to…
CVE-2004-0202 - CVSS 5 (medium), 2004-08-06: IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote…
CVE-2004-0201 - CVSS 10 (critical), 2004-08-06: Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote…
CVE-2003-1048 - CVSS 7.8 (high), 2004-07-27: Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash)…
CVE-2004-0123 - CVSS 7.5 (high), 2004-06-01: Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause…
CVE-2003-0469 - CVSS 7.5 (high), 2003-08-07: Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and…
CVE-2003-0010 - CVSS 7.5 (high), 2003-03-24: Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote…
CVE-2002-2185 - CVSS 4.9 (medium), 2002-12-31: The Internet Group Management Protocol (IGMP) allows local users to cause a denial of service via an IGMP membership report to a target's Ethernet address…
CVE-2002-1258 - CVSS 5 (medium), 2002-12-23: Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote…
CVE-2002-1257 - CVSS 10 (critical), 2002-12-23: Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes…
CVE-2002-1325 - CVSS 5 (medium), 2002-12-23: Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the…
CVE-2002-1260 - CVSS 7.5 (high), 2002-12-23: The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access…
CVE-2002-1183 - CVSS 7.5 (high), 2002-12-11: Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka…
CVE-2002-0694 - CVSS 7.5 (high), 2002-10-10: The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP…
CVE-2002-0693 - CVSS 7.5 (high), 2002-10-10: Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server…
CVE-2002-0862 - CVSS 6.8 (medium), 2002-10-04: The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including…
CVE-2002-0699 - CVSS 5 (medium), 2002-10-04: Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0,…
CVE-2002-0070 - CVSS 7.6 (high), 2002-03-15: Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler…
CVE-2002-0053 - CVSS 7.5 (high), 2002-03-08: Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service…
CVE-2001-0876 - CVSS 7.5 (high), 2001-12-20: Buffer overflow in Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to execute arbitrary code via a NOTIFY directive…
CVE-2001-0877 - CVSS 5 (medium), 2001-12-20: Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that…
CVE-2001-0721 - CVSS 5 (medium), 2001-12-06: Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a…
CVE-2001-1055 - CVSS 5 (medium), 2001-07-30: The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP request packets with…
CVE-2001-0238 - CVSS 7.5 (high), 2001-07-02: Microsoft Data Access Component Internet Publishing Provider 8.103.2519.0 and earlier allows remote attackers to bypass Security Zone restrictions via WebDAV…
CVE-2000-1039 - CVSS 5 (medium), 2001-01-09: Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and…
CVE-2000-0979 - CVSS 6.4 (medium), 2000-12-19: File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers…
CVE-2000-0980 - CVSS 5 (medium), 2000-12-19: NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers…
CVE-2000-1003 - CVSS 2.6 (low), 2000-12-11: NETBIOS client in Windows 95 and Windows 98 allows a remote attacker to cause a denial of service by changing a file sharing service to return an unknown…
CVE-2000-0790 - CVSS 4.6 (medium), 2000-10-20: The web-based folder display capability in Microsoft Internet Explorer 5.5 on Windows 98 allows local users to insert Trojan horse programs by modifying the…
CVE-2000-1218 - CVSS 9.8 (critical), 2000-04-14: The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes…
CVE-2000-0168 - CVSS 5 (medium), 2000-03-04: Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in…
CVE-1999-0909 - CVSS 7.5 (high), 1999-09-20: Multihomed Windows systems allow a remote attacker to bypass IP source routing restrictions via a malformed packet with IP options, aka the "Spoofed Route…
CVE-1999-0875 - CVSS 7.5 (high), 1999-08-11: DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes.