Vulnerabilities > Microsoft

DATE CVE VULNERABILITY TITLE RISK
2001-12-06 CVE-2001-0721 Unspecified vulnerability in Microsoft products
Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request.
network
low complexity
microsoft
5.0
2001-12-06 CVE-2001-0719 Buffer Overflow vulnerability in Microsoft Windows Media Player 6.4
Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.
network
low complexity
microsoft
7.5
2001-12-06 CVE-2001-0663 Unspecified vulnerability in Microsoft Windows 2000 and Windows NT
Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.
network
low complexity
microsoft
5.0
2001-12-03 CVE-2001-0945 Buffer Overflow vulnerability in Microsoft Outlook Express 5.0/5.0.1/5.0.2
Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line.
network
low complexity
microsoft
5.0
2001-11-26 CVE-2001-0919 Unspecified vulnerability in Microsoft Internet Explorer 5.5
Internet Explorer 5.50.4134.0100 on Windows ME with "Prompt to allow cookies to be stored on your machine" enabled does not warn a user when a cookie is set using Javascript.
network
high complexity
microsoft
5.1
2001-11-26 CVE-2001-0875 Unspecified vulnerability in Microsoft Internet Explorer 5.5/6.0
Internet Explorer 5.5 and 6.0 allows remote attackers to cause the File Download dialogue box to misrepresent the name of the file in the dialogue in a way that could fool users into thinking that the file type is safe to download.
network
low complexity
microsoft
7.5
2001-11-21 CVE-2001-0909 Buffer Overflow vulnerability in Microsoft Windows XP HCP URI
Buffer overflow in helpctr.exe program in Microsoft Help Center for Windows XP allows remote attackers to execute arbitrary code via a long hcp: URL.
network
low complexity
microsoft
7.5
2001-11-20 CVE-2001-0904 Unspecified vulnerability in Microsoft Internet Explorer 5.5/6.0
Internet Explorer 5.5 and 6 with the Q312461 (MS01-055) patch modifies the HTTP_USER_AGENT (UserAgent) information that indicates that the patch has been installed, which could allow remote malicious web sites to more easily identify and exploit vulnerable clients.
network
low complexity
microsoft
5.0
2001-11-20 CVE-2001-0902 Unspecified vulnerability in Microsoft Internet Information Services 5.0
Microsoft IIS 5.0 allows remote attackers to spoof web log entries via an HTTP request that includes hex-encoded newline or form-feed characters.
network
low complexity
microsoft
7.5
2001-11-14 CVE-2001-0724 Unspecified vulnerability in Microsoft Internet Explorer 5.5
Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of CVE-2001-0664.
network
low complexity
microsoft
7.5