Vulnerabilities > Microsoft > Windows 95

DATE CVE VULNERABILITY TITLE RISK
1999-12-10 CVE-1999-0975 Unspecified vulnerability in Microsoft Windows 95, Windows 98 and Windows NT
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
local
low complexity
microsoft
4.6
1999-11-12 CVE-2000-0330 Unspecified vulnerability in Microsoft Windows 95 and Windows 98
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
network
high complexity
microsoft
7.6
1999-08-16 CVE-1999-0749 Unspecified vulnerability in Microsoft Windows 95 and Windows 98
Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
network
high complexity
microsoft
2.6
1999-04-12 CVE-1999-0444 Unspecified vulnerability in Microsoft Windows 95, Windows 98 and Windows NT
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
network
low complexity
microsoft
5.0
1999-03-08 CVE-1999-1254 Unspecified vulnerability in Microsoft Windows 95, Windows 98 and Windows NT
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
network
low complexity
microsoft
5.0
1999-02-06 CVE-1999-1201 Unspecified vulnerability in Microsoft Windows 95 and Windows 98
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
network
low complexity
microsoft
5.0
1998-10-05 CVE-1999-1291 Unspecified vulnerability in Microsoft Windows 95 and Windows NT
TCP/IP implementation in Microsoft Windows 95, Windows NT 4.0, and possibly others, allows remote attackers to reset connections by forcing a reset (RST) via a PSH ACK or other means, obtaining the target's last sequence number from the resulting packet, then spoofing a reset to the target.
network
low complexity
microsoft
5.0
1998-02-13 CVE-1999-0258 Unspecified vulnerability in Microsoft Windows 95 and Windows NT
Bonk variation of teardrop IP fragmentation denial of service.
network
low complexity
microsoft
5.0
1998-02-01 CVE-1999-0256 Buffer overflow in War FTP allows remote execution of commands.
network
low complexity
jgaa microsoft
7.5
1997-12-16 CVE-1999-0104 A later variation on the Teardrop IP denial of service attack, a.k.a.
network
low complexity
caldera hp microsoft sun
5.0