W2
Product
Windows 2000
On CISA KEVExploited in the wild
514
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 22Medium 5Low 0
Watch
Add Windows 2000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-0237 | – | Apr 14 | The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry… Affected: All versions, or not specified |
| CVE-2010-0236 | – | Apr 14 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link… Affected: All versions, or not specified |
| CVE-2010-0235 | – | Apr 14 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows… Affected: All versions, or not specified |
| CVE-2010-0234 | – | Apr 14 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key… Affected: All versions, or not specified |
| CVE-2010-0025 | – | Apr 14 | The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate… Affected: All versions, or not specified |
| CVE-2010-0024 | – | Apr 14 | The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX… Affected: All versions, or not specified |
| CVE-2010-0805 | – | Mar 31 | The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remote attackers to execute arbitrary code… Affected: All versions, or not specified |
| CVE-2010-0494 | – | Mar 31 | Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site… Affected: All versions, or not specified |
| CVE-2010-0491 | – | Mar 31 | Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML… Affected: All versions, or not specified |
| CVE-2010-0489 | – | Mar 31 | Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory… Affected: All versions, or not specified |
| CVE-2010-0267 | – | Mar 31 | Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was… Affected: All versions, or not specified |
| CVE-2010-0917 | – | Mar 3 | Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote… Affected: All versions, or not specified |
| CVE-2010-0483 | – | Mar 3 | vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote… Affected: All versions, or not specified |
| CVE-2010-0719 | – | Feb 26 | An unspecified API in Microsoft Windows 2000, Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 does not validate arguments, which allows local… Affected: All versions, or not specified |
| CVE-2010-0252 | – | Feb 10 | The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3,… Affected: All versions, or not specified |
| CVE-2010-0233 | – | Feb 10 | Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users… Affected: sp4 |
| CVE-2010-0231 | – | Feb 10 | The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2010-0035 | – | Feb 10 | The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos… Affected: All versions, or not specified |
| CVE-2010-0028 | – | Feb 10 | Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka… Affected: All versions, or not specified |
| CVE-2010-0023 | – | Feb 10 | The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local… Affected: All versions, or not specified |
| CVE-2010-0022 | – | Feb 10 | The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2010-0020 | – | Feb 10 | The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2010-0016 | – | Feb 10 | The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and… Affected: All versions, or not specified |
| CVE-2010-0555 | – | Feb 4 | Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended… Affected: All versions, or not specified |
| CVE-2010-0027 | – | Jan 22 | The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003… Affected: All versions, or not specified |
| CVE-2010-0018 | – | Jan 13 | Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1,… Affected: All versions, or not specified |
| CVE-2009-4313 | – | Dec 13 | ir32_32.dll 3.24.15.3 in the Indeo32 codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (heap… Affected: All versions, or not specified |
| CVE-2009-4312 | – | Dec 13 | Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media… Affected: All versions, or not specified |
| CVE-2009-4311 | – | Dec 13 | Unspecified vulnerability in the Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via crafted media… Affected: All versions, or not specified |
| CVE-2009-4310 | – | Dec 13 | Stack-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2009-4309 | – | Dec 13 | Heap-based buffer overflow in the Intel Indeo41 codec for Windows Media Player in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2009-4210 | – | Dec 13 | The Indeo codec in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to cause a denial of service (memory corruption) or possibly have… Affected: All versions, or not specified |
| CVE-2009-3677 | – | Dec 9 | The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly verify the… Affected: All versions, or not specified |
| CVE-2009-3675 | – | Dec 9 | LSASS.exe in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote authenticated users to cause a… Affected: sp4 |
| CVE-2009-3674 | – | Dec 9 | Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly… Affected: All versions, or not specified |
| CVE-2009-3673 | – | Dec 9 | Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not… Affected: All versions, or not specified |
| CVE-2009-2506 | – | Dec 9 | Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and… Affected: All versions, or not specified |
| CVE-2009-2523 | – | Nov 11 | The License Logging Server (llssrv.exe) in Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via an RPC message containing a string without a null… Affected: All versions, or not specified |
| CVE-2009-2514 | – | Nov 11 | win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not correctly parse font code during construction of a directory-entry table,… Affected: All versions, or not specified |
| CVE-2009-2513 | – | Nov 11 | The Graphics Device Interface (GDI) in win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and… Affected: All versions, or not specified |
| CVE-2009-1928 | – | Nov 11 | Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application… Affected: All versions, or not specified |
| CVE-2009-1127 | – | Nov 11 | win32k.sys in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not correctly validate an… Affected: All versions, or not specified |
| CVE-2009-2531 | – | Oct 14 | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1)… Affected: All versions, or not specified |
| CVE-2009-2530 | – | Oct 14 | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1)… Affected: All versions, or not specified |
| CVE-2009-2525 | – | Oct 14 | Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize… Affected: All versions, or not specified |
| CVE-2009-2515 | – | Oct 14 | Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain… Affected: All versions, or not specified |
| CVE-2009-2511 | – | Oct 14 | Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2009-2510 | – | Oct 14 | The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2,… Affected: All versions, or not specified |
| CVE-2009-2507 | – | Oct 14 | A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers… Affected: All versions, or not specified |
| CVE-2009-2497 | – | Oct 14 | The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)