Vulnerabilities > Microsoft > Windows ME > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2001-12-31 | CVE-2001-1552 | Denial of Service vulnerability in Windows ME Simple Service Discovery Protocol ssdpsrv.exe in Windows ME allows remote attackers to cause a denial of service by sending multiple newlines in a Simple Service Discovery Protocol (SSDP) message. | 5.0 |
| 2001-12-20 | CVE-2001-0877 | Denial of Service vulnerability in Microsoft Universal Plug and Play Simple Service Discovery Protocol Universal Plug and Play (UPnP) on Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service via (1) a spoofed SSDP advertisement that causes the client to connect to a service on another machine that generates a large amount of traffic (e.g., chargen), or (2) via a spoofed SSDP announcement to broadcast or multicast addresses, which could cause all UPnP clients to send traffic to a single target system. | 5.0 |
| 2001-12-06 | CVE-2001-0721 | Unspecified vulnerability in Microsoft products Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request. | 5.0 |
| 2001-02-12 | CVE-2001-0003 | Unspecified vulnerability in Microsoft products Web Extender Client (WEC) in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication" vulnerability. | 5.0 |
| 2001-01-09 | CVE-2000-1039 | Unspecified vulnerability in Microsoft products Various TCP/IP stacks and network applications allow remote attackers to cause a denial of service by flooding a target host with TCP connection attempts and completing the TCP/IP handshake without maintaining the connection state on the attacker host, aka the "NAPTHA" class of vulnerabilities. | 5.0 |
| 2000-12-19 | CVE-2000-0980 | Unspecified vulnerability in Microsoft products NMPI (Name Management Protocol on IPX) listener in Microsoft NWLink does not properly filter packets from a broadcast address, which allows remote attackers to cause a broadcast storm and flood the network. | 5.0 |
| 2000-12-19 | CVE-2000-0979 | Unspecified vulnerability in Microsoft products File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability. | 6.4 |