Login Request a demo
Unscored severity · published Feb 18, 2000
CVE-2000-0155
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive
–
CVSS
3.9%
EPSS
No
On KEV
Description
Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alternate program to execute when other users access a drive.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W9
Windows 95 · Microsoft
All versions, or not specified · source: NVD
W9
Windows 98 · Microsoft
All versions, or not specified · source: NVD
WN
Windows NT · Microsoft
4.0 · source: NVD
Affected product
W9
Windows 95
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-0155
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-0155
Exploit
http://www.securityfocus.com/bid/993
www.securityfocus.com
http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000701bf79cd%24fdb5a620%244c4342a6%40mightye.org
More from Windows 95
–
CVE-1999-1593
Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to…
–
CVE-2005-2388
Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code
–
CVE-2002-1692
Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be…
–
CVE-2002-1258
Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote attackers to read files…
–
CVE-2002-1257
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote attackers to execute arbitrary code by including a Java applet that invokes COM (Component Object…