Vulnerabilities > Microsoft

DATE CVE VULNERABILITY TITLE RISK
1997-12-16 CVE-1999-0104 A later variation on the Teardrop IP denial of service attack, a.k.a.
network
low complexity
caldera hp microsoft sun
5.0
1997-12-16 CVE-1999-0015 Teardrop IP denial of service.
network
low complexity
hp microsoft netbsd sun
5.0
1997-12-01 CVE-1999-0016 Land IP denial of service.
network
low complexity
cisco gnu microsoft hp netbsd sun
5.0
1997-11-01 CVE-1999-0967 Unspecified vulnerability in Microsoft products
Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol.
network
low complexity
microsoft
critical
10.0
1997-10-01 CVE-1999-0294 Unspecified vulnerability in Microsoft Wins
All records in a WINS database can be deleted through SNMP for a denial of service.
network
low complexity
microsoft
5.0
1997-09-01 CVE-1999-0191 Unspecified vulnerability in Microsoft Internet Information Server 3.0
IIS newdsn.exe CGI script allows remote users to overwrite files.
network
low complexity
microsoft
6.4
1997-08-05 CVE-1999-1446 Unspecified vulnerability in Microsoft Internet Explorer 3.0
Internet Explorer 3 records a history of all URL's that are visited by a user in DAT files located in the Temporary Internet Files and History folders, which are not cleared when the user selects the "Clear History" option, and are not visible when the user browses the folders because of tailored displays.
local
low complexity
microsoft
2.1
1997-07-25 CVE-1999-1217 Unspecified vulnerability in Microsoft Windows NT
The PATH in Windows NT includes the current working directory (.), which could allow local users to gain privileges by placing Trojan horse programs with the same name as commonly used system programs into certain directories.
local
low complexity
microsoft
4.6
1997-07-10 CVE-1999-1463 Unspecified vulnerability in Microsoft Windows NT 3.5.1/4.0
Windows NT 4.0 before SP3 allows remote attackers to bypass firewall restrictions or cause a denial of service (crash) by sending improperly fragmented IP packets without the first fragment, which the TCP/IP stack incorrectly reassembles into a valid session.
network
low complexity
microsoft
5.0
1997-07-01 CVE-1999-0153 Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
network
low complexity
microsoft sco
5.0