Windows Nt (Microsoft) - vulnerabilities (CVEs)

252 CVEs, 0 in the last 30 days, 190 known versions, newest CVE from 2008-11-26. Vendor: Microsoft.

CVEs of Windows Nt

CVE-2008-5232 - CVSS 9.3 (critical), 2008-11-26: Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on…
CVE-2007-6026 - CVSS 9.3 (critical), 2007-11-20: Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows…
CVE-2007-1973 - CVSS 6.9 (medium), 2007-04-11: Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via…
CVE-2007-1912 - CVSS 6.8 (medium), 2007-04-10: Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file.
CVE-2006-2379 - CVSS 9.3 (critical), 2006-06-13: Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to…
CVE-2006-1184 - CVSS 5 (medium), 2006-05-10: Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial…
CVE-2006-0034 - CVSS 7.5 (high), 2006-05-10: Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for…
CVE-2006-1591 - CVSS 5.1 (medium), 2006-04-03: Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in…
CVE-2006-0988 - CVSS 7.8 (high), 2006-03-03: The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows…
CVE-2006-0010 - CVSS 9.3 (critical), 2006-01-10: Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote…
CVE-2005-4717 - CVSS 5 (medium), 2005-12-31: Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers…
CVE-2005-2827 - CVSS 7.2 (high), 2005-12-14: The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via…
CVE-2005-2150 - CVSS 5 (medium), 2005-07-11: Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which…
CVE-2005-1935 - CVSS 7.5 (high), 2005-06-13: Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via…
CVE-2005-1184 - CVSS 5 (medium), 2005-05-02: The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct…
CVE-2005-0050 - CVSS 10 (critical), 2005-05-02: The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads…
CVE-2005-0045 - CVSS 7.5 (high), 2005-05-02: The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows…
CVE-2005-0416 - CVSS 7.5 (high), 2005-04-27: The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to…
CVE-2004-0568 - CVSS 10 (critical), 2005-01-10: HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved…
CVE-2004-0899 - CVSS 5 (medium), 2005-01-10: The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of…
CVE-2004-1080 - CVSS 10 (critical), 2005-01-10: The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary…
CVE-2004-0893 - CVSS 7.2 (high), 2005-01-10: The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly…
CVE-2004-0901 - CVSS 10 (critical), 2005-01-10: Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to…
CVE-2004-0571 - CVSS 10 (critical), 2005-01-10: Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri,…
CVE-2004-0900 - CVSS 10 (critical), 2005-01-10: The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which…
CVE-2004-0567 - CVSS 7.5 (high), 2004-12-31: The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server…
CVE-2004-1306 - CVSS 5.1 (medium), 2004-12-31: Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to…
CVE-2004-1049 - CVSS 5.1 (medium), 2004-12-31: Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani…
CVE-2004-1361 - CVSS 5 (medium), 2004-12-23: Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute…
CVE-2004-1305 - CVSS 5 (medium), 2004-12-23: The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause…
CVE-2004-0207 - CVSS 2.1 (low), 2004-11-03: "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows…
CVE-2004-0574 - CVSS 10 (critical), 2004-11-03: The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and…
CVE-2004-0206 - CVSS 7.5 (high), 2004-11-03: Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers…
CVE-2004-0569 - CVSS 7.5 (high), 2004-11-03: The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious…
CVE-2004-0208 - CVSS 7.2 (high), 2004-11-03: The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel…
CVE-2004-0201 - CVSS 10 (critical), 2004-08-06: Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote…
CVE-2004-0212 - CVSS 10 (critical), 2004-08-06: Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to…
CVE-2004-0210 - CVSS 7.8 (high), 2004-08-06: The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying…
CVE-2003-1048 - CVSS 7.8 (high), 2004-07-27: Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash)…
CVE-2003-0719 - CVSS 7.5 (high), 2004-06-01: Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a,…
CVE-2003-0906 - CVSS 7.6 (high), 2004-06-01: Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6a, 2000 SP2…
CVE-2004-0123 - CVSS 7.5 (high), 2004-06-01: Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause…
CVE-2003-0533 - CVSS 7.5 (high), 2004-06-01: Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft…
CVE-2003-0807 - CVSS 5 (medium), 2004-06-01: Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition,…
CVE-2004-0118 - CVSS 7.2 (high), 2004-06-01: The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local…
CVE-2003-0806 - CVSS 7.5 (high), 2004-06-01: Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of a domain, allows…
CVE-2003-0910 - CVSS 7.2 (high), 2004-06-01: The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to…
CVE-2004-0124 - CVSS 2.6 (low), 2004-06-01: The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context"…
CVE-2003-0818 - CVSS 7.5 (high), 2004-03-03: Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on…
CVE-2003-0825 - CVSS 9.3 (critical), 2004-03-03: The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length…
CVE-2003-1407 - CVSS 7.2 (high), 2003-12-31: Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
CVE-2003-0711 - CVSS 7.5 (high), 2003-11-17: Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to…
CVE-2003-0660 - CVSS 7.5 (high), 2003-11-17: The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is…
CVE-2003-0813 - CVSS 5.1 (medium), 2003-11-17: A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service…
CVE-2003-0659 - CVSS 7.2 (high), 2003-11-17: Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to…
CVE-2003-0717 - CVSS 7.5 (high), 2003-11-17: The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute…
CVE-2003-0661 - CVSS 5 (medium), 2003-10-20: The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could…
CVE-2003-0715 - CVSS 10 (critical), 2003-09-17: Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code…
CVE-2003-0528 - CVSS 10 (critical), 2003-09-17: Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code…
CVE-2003-0525 - CVSS 5 (medium), 2003-08-27: The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of…
CVE-2003-0352 - CVSS 7.5 (high), 2003-08-18: Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code…
CVE-2003-0345 - CVSS 7.5 (high), 2003-08-18: Buffer overflow in the SMB capability for Microsoft Windows XP, 2000, and NT allows remote attackers to cause a denial of service and possibly execute…
CVE-2003-0469 - CVSS 7.5 (high), 2003-08-07: Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and…
CVE-2003-0227 - CVSS 5 (medium), 2003-06-09: The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and…
CVE-2003-0112 - CVSS 4.6 (medium), 2003-05-12: Buffer overflow in Windows Kernel allows local users to gain privileges by causing certain error messages to be passed to a debugger.
CVE-2002-1561 - CVSS 5 (medium), 2003-04-02: The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed…
CVE-2003-0010 - CVSS 7.5 (high), 2003-03-24: Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote…
CVE-2003-0003 - CVSS 7.5 (high), 2003-02-07: Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local…
CVE-2002-2073 - CVSS 4.3 (medium), 2002-12-31: Cross-site scripting (XSS) vulnerability in the default ASP pages on Microsoft Site Server 3.0 on Windows NT 4.0 allows remote attackers to inject arbitrary…
CVE-2002-2028 - CVSS 2.1 (low), 2002-12-31: The screensaver on Windows NT 4.0, 2000, XP, and 2002 does not verify if a domain account has already been locked when a valid password is provided, which…
CVE-2002-1712 - CVSS 5 (medium), 2002-12-31: Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and…
CVE-2002-2401 - CVSS 3.6 (low), 2002-12-31: NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users…
CVE-2002-1257 - CVSS 10 (critical), 2002-12-23: Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes…
CVE-2002-1325 - CVSS 5 (medium), 2002-12-23: Microsoft Virtual Machine (VM) build 5.0.3805 and earlier allows remote attackers to determine a local user's username via a Java applet that accesses the…
CVE-2002-1260 - CVSS 7.5 (high), 2002-12-23: The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and earlier allow remote attackers to bypass security checks and access…
CVE-2002-1258 - CVSS 5 (medium), 2002-12-23: Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote…
CVE-2002-1183 - CVSS 7.5 (high), 2002-12-11: Microsoft Windows 98 and Windows NT 4.0 do not properly verify the Basic Constraints of digital certificates, allowing remote attackers to execute code, aka…
CVE-2002-1184 - CVSS 4.6 (medium), 2002-11-12: The system root folder of Microsoft Windows 2000 has default permissions of Everyone group with Full access (Everyone:F) and is in the search path when…
CVE-2002-0863 - CVSS 5 (medium), 2002-10-11: Remote Data Protocol (RDP) version 5.0 in Microsoft Windows 2000 and RDP 5.1 in Windows XP does not encrypt the checksums of plaintext session data, which…
CVE-2002-0694 - CVSS 7.5 (high), 2002-10-10: The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP…
CVE-2002-0693 - CVSS 7.5 (high), 2002-10-10: Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server…
CVE-2002-0862 - CVSS 6.8 (medium), 2002-10-04: The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including…
CVE-2002-0699 - CVSS 5 (medium), 2002-10-04: Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium, Windows NT 4.0,…
CVE-2002-0724 - CVSS 7.5 (high), 2002-09-24: Buffer overflow in SMB (Server Message Block) protocol in Microsoft Windows NT, Windows 2000, and Windows XP allows attackers to cause a denial of service…
CVE-2002-0725 - CVSS 5.5 (medium), 2002-09-05: NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes…
CVE-2002-0421 - CVSS 5 (medium), 2002-08-12: IIS 4.0 allows local users to bypass the "User cannot change password" policy for Windows NT by directly calling .htr password changing programs in the…
CVE-2002-0391 - CVSS 9.8 (critical), 2002-08-12: Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows…
CVE-2002-0366 - CVSS 7.2 (high), 2002-07-03: Buffer overflow in Remote Access Service (RAS) phonebook for Windows NT 4.0, 2000, XP, and Routing and Remote Access Server (RRAS) allows local users to…
CVE-2002-0367 - CVSS 7.8 (high), 2002-06-25: smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users…
CVE-2002-0151 - CVSS 7.2 (high), 2002-04-04: Buffer overflow in Multiple UNC Provider (MUP) in Microsoft Windows operating systems allows local users to cause a denial of service or possibly gain SYSTEM…
CVE-2002-0070 - CVSS 7.6 (high), 2002-03-15: Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler…
CVE-2002-0053 - CVSS 7.5 (high), 2002-03-08: Buffer overflow in SNMP agent service in Windows 95/98/98SE, Windows NT 4.0, Windows 2000, and Windows XP allows remote attackers to cause a denial of service…
CVE-2002-0018 - CVSS 10 (critical), 2002-03-08: In Microsoft Windows NT and Windows 2000, a trusting domain that receives authorization information from a trusted domain does not verify that the trusted…
CVE-2001-0879 - CVSS 5 (medium), 2001-12-20: Format string vulnerability in the C runtime functions in SQL Server 7.0 and 2000 allows attackers to cause a denial of service.
CVE-2001-0663 - CVSS 5 (medium), 2001-12-06: Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP)…
CVE-2001-0662 - CVSS 5 (medium), 2001-10-30: RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.
CVE-2001-0509 - CVSS 5 (medium), 2001-09-20: Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4)…
CVE-2001-0543 - CVSS 5 (medium), 2001-09-20: Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of…
CVE-2001-1452 - CVSS 7.5 (high), 2001-08-31: By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers…
CVE-2000-1200 - CVSS 5 (medium), 2001-08-31: Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null…