| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Denial of service in various Windows systems via malformed, fragmented IGMP packets. |
| The Preloader ActiveX control used by Internet Explorer allows remote attackers to read arbitrary files. |
| The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to specify an alternate print provider. |
| Buffer overflows in Windows NT 4.0 print spooler allow remote attackers to gain privileges or cause a denial of service via a malformed spooler request. |
| The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. |
| Internet Explorer 5 allows remote attackers to read files via an ExecCommand method called on an IFRAME. |
| Buffer overflow in Internet Explorer 4.0 via EMBED tag. |
| Race condition in the SSL ISAPI filter in IIS and other servers may leak information in plaintext. |
| Internet Explorer 5 allows a remote attacker to modify the IE client's proxy configuration via a malicious Web Proxy Auto-Discovery (WPAD) server. |
| Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file. |
| Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet. |
| An attacker can conduct a denial of service in Windows NT by executing a program with a malformed file image header. |
| When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page". |
| The Windows NT Client Server Runtime Subsystem (CSRSS) can be subjected to a denial of service when all worker threads are waiting for user input. |
| Denial of service in Windows NT Local Security Authority (LSA) through a malformed LSA request. |
| A remote attacker can disable the virus warning mechanism in Microsoft Excel 97. |
| A Windows NT account policy has inappropriate, security-critical settings for lockout, e.g. lockout duration, lockout after bad logon attempts, etc. |
| The HKEY_CLASSES_ROOT key in a Windows NT system has inappropriate, system-critical permissions. |
| A Windows NT system's registry audit policy does not log an event success or failure for non-critical registry keys. |
| A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys. |
