WN
Product
Windows NT
On CISA KEVExploited in the wild
267
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 6Medium 1Low 0
Watch
Add Windows NT to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0210 In wildKEV | 7.8 | Jul 14 | Microsoft Windows Privilege Escalation Vulnerability Affected: 4.0; 4.0; 4.0 |
| CVE-2002-0367 In wildKEV | 7.8 | Jun 25 | Microsoft Windows Privilege Escalation Vulnerability Affected: 4.0; 4.0 |
| CVE-2002-0391 | 9.8 | Aug 12 | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to… Affected: 4.0 |
| CVE-2000-1218 | 9.8 | Apr 14 | The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS… Affected: 4.0 |
| CVE-1999-0511 | 9.1 | Jan 1 | IP forwarding is enabled on a machine which is not a router or firewall Affected: All versions, or not specified |
| CVE-2003-1048 | 7.8 | Jul 27 | Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF… Affected: 4.0; 4.0; 4.0 |
| CVE-2001-1452 | 7.5 | Aug 31 | By default, DNS servers on Windows NT 4.0 and Windows 2000 Server cache glue records received from non-delegated name servers, which allows remote attackers to poison the DNS… Affected: 4.0 |
| CVE-1999-1127 | 7.5 | Dec 31 | Windows NT 4.0 does not properly shut down invalid named pipe RPC connections, which allows remote attackers to cause a denial of service (resource exhaustion) via a series of… Affected: 4.0; 4.0; 4.0; 4.0 |
| CVE-2001-0006 | 7.1 | Feb 12 | The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to "No Access" and… Affected: 4.0 |
| CVE-2002-0725 | 5.5 | Sep 5 | NTFS file system in Windows NT 4.0 and Windows 2000 SP2 allows local attackers to hide file usage activities via a hard link to the target file, which causes the link to be… Affected: 4.0 |
| CVE-2008-5232 | – | Nov 26 | Buffer overflow in the CallHTMLHelp method in the Microsoft Windows Media Services ActiveX control in nskey.dll 4.1.00.3917 in Windows Media Services on Microsoft Windows NT and… Affected: 4.0 |
| CVE-2008-3014 | – | Sep 11 | Buffer overflow in gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3,… Affected: vista; xp |
| CVE-2008-3012 | – | Sep 11 | gdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and SP3,… Affected: vista; xp |
| CVE-2008-3008 | – | Sep 11 | Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code… Affected: xp |
| CVE-2007-5348 | – | Sep 11 | Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, Office XP SP3, Office 2003 SP2 and… Affected: vista; xp |
| CVE-2008-1456 | – | Aug 13 | Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote… Affected: 2008; vista; xp |
| CVE-2008-1457 | – | Aug 13 | The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions,… Affected: 2008; vista; xp |
| CVE-2008-2246 | – | Aug 13 | Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which… Affected: 2008 |
| CVE-2008-1435 | – | Jul 8 | Windows Explorer in Microsoft Windows Vista up to SP1, and Server 2008, allows user-assisted remote attackers to execute arbitrary code via crafted saved-search (.search-ms) files… Affected: 2008 |
| CVE-2008-1453 | – | Jun 12 | The Bluetooth stack in Microsoft Windows XP SP2 and SP3, and Vista Gold and SP1, allows physically proximate attackers to execute arbitrary code via a large series of Service… Affected: xp |
| CVE-2008-1445 | – | Jun 12 | Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of… Affected: 2008; 2008; xp |
| CVE-2008-1436 | – | Apr 21 | Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might… Affected: vista; vista; vista |
| CVE-2008-0927 | – | Apr 14 | dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection… Affected: 2000; 2003 |
| CVE-2008-1087 | – | Apr 8 | Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an… Affected: 2008; 2008; 2008 |
| CVE-2008-1086 | – | Apr 8 | The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows… Affected: 2008; 2008; 2008 |
| CVE-2007-6026 | – | Nov 20 | Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to… Affected: 4.0 |
| CVE-2007-1973 | – | Apr 11 | Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary… Affected: 4.0 |
| CVE-2007-1912 | – | Apr 10 | Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file Affected: All versions, or not specified |
| CVE-2006-2379 | – | Jun 13 | Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2006-1184 | – | May 10 | Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash)… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +34 more |
| CVE-2006-0034 | – | May 10 | Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +34 more |
| CVE-2006-1591 | – | Apr 3 | Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2006-0988 | – | Mar 3 | The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and… Affected: 4.0 |
| CVE-2006-0005 | – | Feb 14 | Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle… Affected: datacenter_server; datacenter_server; datacenter_server; datacenter_server; datacenter_server; xp; +3 more |
| CVE-2006-0010 | – | Jan 10 | Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute… Affected: 3.5.1; 3.5.1; 3.5.1; 3.5.1; 3.5.1; 3.5.1; +34 more |
| CVE-2005-4717 | – | Dec 31 | Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of… Affected: 4.0 |
| CVE-2005-2827 | – | Dec 14 | The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a… Affected: 4.0 |
| CVE-2005-2150 | – | Jul 11 | Windows NT 4.0 and Windows 2000 before URP1 for Windows 2000 SP4 does not properly prevent NULL sessions from accessing certain alternate named pipes, which allows remote… Affected: 4.0 |
| CVE-2005-1935 | – | Jun 13 | Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit… Affected: 4.0; 4.0; 4.0 |
| CVE-2005-0050 | – | May 2 | The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +18 more |
| CVE-2005-0045 | – | May 2 | The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +22 more |
| CVE-2005-1184 | – | May 2 | The TCP/IP stack in multiple operating systems allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the correct sequence number but the… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +26 more |
| CVE-2005-0416 | – | Apr 27 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2004-0571 | – | Jan 10 | Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2004-0901 | – | Jan 10 | Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2004-1080 | – | Jan 10 | The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +18 more |
| CVE-2004-0568 | – | Jan 10 | HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file,… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +34 more |
| CVE-2004-0893 | – | Jan 10 | The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +25 more |
| CVE-2004-0899 | – | Jan 10 | The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages,… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +34 more |
| CVE-2004-0900 | – | Jan 10 | The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +34 more |