W2
Product
Windows 2000
On CISA KEVExploited in the wild
514
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 22Medium 5Low 0
Watch
Add Windows 2000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-0555 | – | Oct 14 | Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced… Affected: All versions, or not specified |
| CVE-2009-0091 | – | Oct 14 | Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2009-0090 | – | Oct 14 | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory,… Affected: All versions, or not specified |
| CVE-2009-2519 | – | Sep 8 | The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers… Affected: All versions, or not specified |
| CVE-2009-2499 | – | Sep 8 | Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2009-2498 | – | Sep 8 | Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files,… Affected: All versions, or not specified |
| CVE-2009-1926 | – | Sep 8 | Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP… Affected: All versions, or not specified |
| CVE-2009-1925 | – | Sep 8 | The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to… Affected: All versions, or not specified |
| CVE-2009-1920 | – | Sep 8 | The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly load decoded scripts into memory before… Affected: All versions, or not specified |
| CVE-2009-1930 | – | Aug 12 | The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute… Affected: All versions, or not specified |
| CVE-2009-1924 | – | Aug 12 | Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted… Affected: All versions, or not specified |
| CVE-2009-1923 | – | Aug 12 | Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2009-1922 | – | Aug 12 | The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user… Affected: All versions, or not specified |
| CVE-2009-1133 | – | Aug 12 | Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client… Affected: All versions, or not specified |
| CVE-2009-1919 | – | Jul 29 | Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3,… Affected: All versions, or not specified |
| CVE-2009-1539 | – | Jul 15 | The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does… Affected: All versions, or not specified |
| CVE-2009-1538 | – | Jul 15 | The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2… Affected: All versions, or not specified |
| CVE-2009-0232 | – | Jul 15 | Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2… Affected: All versions, or not specified |
| CVE-2009-1126 | – | Jun 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop… Affected: All versions, or not specified |
| CVE-2009-1125 | – | Jun 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified… Affected: All versions, or not specified |
| CVE-2009-1124 | – | Jun 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in… Affected: All versions, or not specified |
| CVE-2009-1139 | – | Jun 10 | Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and… Affected: All versions, or not specified |
| CVE-2009-1138 | – | Jun 10 | The LDAP service in Active Directory on Microsoft Windows 2000 SP4 does not properly free memory for LDAP and LDAPS requests, which allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2009-0568 | – | Jun 10 | The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its… Affected: All versions, or not specified |
| CVE-2009-0230 | – | Jun 10 | The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain… Affected: All versions, or not specified |
| CVE-2009-0229 | – | Jun 10 | The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary… Affected: sp4 |
| CVE-2009-0228 | – | Jun 10 | Stack-based buffer overflow in the EnumeratePrintShares function in Windows Print Spooler Service (win32spl.dll) in Microsoft Windows 2000 SP4 allows remote printer servers to… Affected: All versions, or not specified |
| CVE-2009-0550 | – | Apr 15 | Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet in Microsoft Internet… Affected: All versions, or not specified |
| CVE-2009-0235 | – | Apr 15 | Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2009-0089 | – | Apr 15 | Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https… Affected: All versions, or not specified |
| CVE-2009-0088 | – | Apr 15 | The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an… Affected: All versions, or not specified |
| CVE-2009-0087 | – | Apr 15 | Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in… Affected: All versions, or not specified |
| CVE-2009-0086 | – | Apr 15 | Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote… Affected: All versions, or not specified |
| CVE-2009-0234 | – | Mar 11 | The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS… Affected: All versions, or not specified |
| CVE-2009-0233 | – | Mar 11 | The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does… Affected: All versions, or not specified |
| CVE-2009-0094 | – | Mar 11 | The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote… Affected: All versions, or not specified |
| CVE-2009-0093 | – | Mar 11 | Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad"… Affected: All versions, or not specified |
| CVE-2009-0085 | – | Mar 10 | The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when… Affected: All versions, or not specified |
| CVE-2009-0083 | – | Mar 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an… Affected: All versions, or not specified |
| CVE-2009-0081 | – | Mar 10 | The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does… Affected: All versions, or not specified |
| CVE-2009-0243 | – | Jan 21 | Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1)… Affected: All versions, or not specified |
| CVE-1999-1593 | – | Jan 15 | Windows Internet Naming Service (WINS) allows remote attackers to cause a denial of service (connectivity loss) or steal credentials via a 1Ch registration that causes WINS to… Affected: All versions, or not specified |
| CVE-2008-4834 | – | Jan 14 | Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via… Affected: All versions, or not specified |
| CVE-2008-2249 | – | Dec 10 | Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2008-5232 | – | Nov 26 | Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and… Affected: All versions, or not specified |
| CVE-2008-5112 | – | Nov 17 | The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account… Affected: All versions, or not specified |
| CVE-2008-4037 | – | Nov 12 | Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote SMB servers to execute arbitrary code on a… Affected: All versions, or not specified |
| CVE-2008-4609 | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… Affected: All versions, or not specified |
| CVE-2008-4038 | – | Oct 15 | Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via… Affected: All versions, or not specified |
| CVE-2008-4023 | – | Oct 15 | Active Directory in Microsoft Windows 2000 SP4 does not properly allocate memory for (1) LDAP and (2) LDAPS requests, which allows remote attackers to execute arbitrary code via a… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)