W2
Product
Windows 2000
On CISA KEVExploited in the wild
514
CVEs
6
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 22Medium 5Low 0
Watch
Add Windows 2000 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-6296 | – | Dec 5 | The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote… Affected: All versions, or not specified |
| CVE-2006-5988 | – | Nov 20 | Unspecified vulnerability in Windows 2000 Advanced Server SP4 running Active Directory allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by… Affected: All versions, or not specified |
| CVE-2006-4688 | – | Nov 14 | Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted… Affected: All versions, or not specified |
| CVE-2006-4689 | – | Nov 14 | Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause… Affected: All versions, or not specified |
| CVE-2006-4691 | – | Nov 14 | Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2006-3445 | – | Nov 14 | Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to… Affected: All versions, or not specified |
| CVE-2006-5758 | – | Nov 6 | The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped… Affected: All versions, or not specified |
| CVE-2006-4696 | – | Oct 10 | Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2006-3873 | – | Sep 12 | Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers… Affected: All versions, or not specified |
| CVE-2006-0032 | – | Sep 12 | Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote… Affected: resource_kit |
| CVE-2006-3440 | – | Aug 9 | Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka… Affected: All versions, or not specified |
| CVE-2006-3439 | – | Aug 9 | Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary… Affected: All versions, or not specified |
| CVE-2006-3441 | – | Aug 9 | Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record… Affected: All versions, or not specified |
| CVE-2006-3443 | – | Aug 9 | Untrusted search path vulnerability in Winlogon in Microsoft Windows 2000 SP4, when SafeDllSearchMode is disabled, allows local users to gain privileges via a malicious DLL in the… Affected: All versions, or not specified |
| CVE-2006-3648 | – | Aug 9 | Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors… Affected: All versions, or not specified |
| CVE-2006-3444 | – | Aug 9 | Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, probably a buffer overflow, allows local users to obtain privileges via unspecified vectors involving an… Affected: All versions, or not specified |
| CVE-2006-3942 | – | Jul 31 | The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION… Affected: All versions, or not specified |
| CVE-2006-3880 | – | Jul 27 | Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous… Affected: All versions, or not specified |
| CVE-2006-1314 | – | Jul 11 | Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers… Affected: All versions, or not specified |
| CVE-2006-2373 | – | Jun 13 | The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by… Affected: All versions, or not specified |
| CVE-2006-2371 | – | Jun 13 | Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote… Affected: All versions, or not specified |
| CVE-2006-2370 | – | Jun 13 | Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or… Affected: All versions, or not specified |
| CVE-2006-1313 | – | Jun 13 | Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which… Affected: All versions, or not specified |
| CVE-2006-2379 | – | Jun 13 | Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via… Affected: All versions, or not specified |
| CVE-2006-2380 | – | Jun 13 | Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC… Affected: All versions, or not specified |
| CVE-2006-2334 | – | May 12 | The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style… Affected: All versions, or not specified |
| CVE-2006-0034 | – | May 10 | Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and… Affected: All versions, or not specified |
| CVE-2006-1184 | – | May 10 | Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash)… Affected: All versions, or not specified |
| CVE-2006-0012 | – | Apr 12 | Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack… Affected: All versions, or not specified |
| CVE-2006-1591 | – | Apr 3 | Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file Affected: All versions, or not specified |
| CVE-2006-0988 | – | Mar 3 | The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and… Affected: All versions, or not specified |
| CVE-2006-0006 | – | Feb 14 | Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media… Affected: All versions, or not specified |
| CVE-2006-0005 | – | Feb 14 | Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle… Affected: All versions, or not specified |
| CVE-2006-0488 | – | Feb 1 | The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte… Affected: All versions, or not specified |
| CVE-2006-0376 | – | Jan 22 | The 802.11 wireless client in certain operating systems including Windows 2000, Windows XP, and Windows Server 2003 does not warn the user when (1) it establishes an association… Affected: All versions, or not specified |
| CVE-2006-0010 | – | Jan 10 | Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2006-0020 | – | Jan 10 | An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows… Affected: All versions, or not specified |
| CVE-2006-0143 | – | Jan 9 | Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or… Affected: All versions, or not specified |
| CVE-2005-4717 | – | Dec 31 | Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of… Affected: All versions, or not specified |
| CVE-2005-2827 | – | Dec 14 | The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a… Affected: All versions, or not specified |
| CVE-2005-3981 | – | Dec 4 | NOTE: this issue has been disputed by third parties Affected: All versions, or not specified |
| CVE-2005-3945 | – | Dec 1 | The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers… Affected: All versions, or not specified |
| CVE-2005-2123 | – | Nov 29 | Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code… Affected: All versions, or not specified |
| CVE-2005-2124 | – | Nov 29 | Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly… Affected: All versions, or not specified |
| CVE-2005-3644 | – | Nov 17 | PNP_GetDeviceList (upnp_getdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of… Affected: All versions, or not specified |
| CVE-2005-2122 | – | Oct 21 | Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font… Affected: All versions, or not specified |
| CVE-2005-2118 | – | Oct 21 | Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk)… Affected: All versions, or not specified |
| CVE-2005-2117 | – | Oct 21 | Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote… Affected: All versions, or not specified |
| CVE-2005-2126 | – | Oct 21 | The FTP client in Windows XP SP1 and Server 2003, and Internet Explorer 6 SP1 on Windows 2000 SP4, when "Enable Folder View for FTP Sites" is enabled and the user manually… Affected: All versions, or not specified |
| CVE-2005-1985 | – | Oct 13 | The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)