[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5J6Q6mQMBtGivSu5ulxHfQV3Ln_lhhalpERxUi6Eu8A":3,"g5a-family:microsoft\u002Fwindows_2000":175,"g5a-ex:microsoft\u002Fwindows_2000@*":181},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":102,"seoMetadata":153,"meta":172},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"microsoft","windows_2000",6,635,4,"2014-04-23",[14,19,22,24,26,28],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2000.0.2195",2,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"2000.2031",1,{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},"2000.2072",{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},"beta3",{"version":27,"cve_count":21,"kev_count":17,"has_kev":18},"resource_kit",{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"sp4",5,"Windows 2000 by Microsoft is a technology product with 6 tracked versions and 635 known security vulnerabilities including 4 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},{"version":25,"cve_count":17,"kev_count":17,"has_kev":18},{"version":27,"cve_count":21,"kev_count":17,"has_kev":18},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},[40,48,56,61,68,74,80,86,92,97],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":4,"epssScore":47},"CVE-2008-4250","The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka \"Server Service Vulnerability.\"","2008-10-23",9.8,"v3.1","Critical",0.98751,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":18,"epssScore":55},"CVE-2003-0352","Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster\u002FMSblast\u002FLovSAN and Nachi\u002FWelchia worms.","2003-08-18",7.5,"v2","High",0.98484,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":18,"epssScore":60},"CVE-2009-1122","The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka \"IIS 5.0 WebDAV Authentication Bypass Vulnerability,\" a different vulnerability than CVE-2009-1535.","2009-06-10",0.98447,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":45,"severity":66,"isKev":18,"epssScore":67},"CVE-2008-1447","The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka \"DNS Insufficient Socket Entropy Vulnerability\" or \"the Kaminsky bug.\"","2008-07-08",6.8,"Medium",0.95182,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":53,"severity":46,"isKev":18,"epssScore":73},"CVE-2005-1983","Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.","2005-08-10",10,0.93014,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":45,"severity":54,"isKev":4,"epssScore":79},"CVE-2010-0249","Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka \"HTML Object Memory Corruption Vulnerability.\"","2010-01-15",8.8,0.91939,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":53,"severity":46,"isKev":18,"epssScore":85},"CVE-2009-3023","Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka \"IIS FTP Service RCE and DoS Vulnerability.\"","2009-08-31",9,0.90913,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":53,"severity":54,"isKev":18,"epssScore":91},"CVE-2010-0483","vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka \"VBScript Help Keypress Vulnerability.\"","2010-03-03",7.6,0.86634,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":72,"cvssVersion":53,"severity":46,"isKev":18,"epssScore":96},"CVE-2001-0241","Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print request that is passed to the extension through IIS 5.0.","2001-06-27",0.85698,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":18,"epssScore":101},"CVE-2003-0109","Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.","2003-03-31",0.85681,[103,112,115,122,124,134,140,147],{"cveId":104,"description":105,"publishedDate":106,"cvssScore":78,"severity":54,"isKev":4,"epssScore":107,"cisaVulnName":108,"cisaDateAdded":109,"cisaShortDescription":110,"cisaRequiredAction":111},"CVE-2010-0806","Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka \"Uninitialized Memory Corruption Vulnerability.\"","2010-03-10",0.82241,"Microsoft Internet Explorer Use-After-Free Vulnerability","2026-05-20","Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"severity":46,"isKev":4,"epssScore":47,"cisaVulnName":113,"cisaDateAdded":109,"cisaShortDescription":114,"cisaRequiredAction":111},"Microsoft Windows Buffer Overflow Vulnerability","Microsoft Windows contains a buffer overflow vulnerability in the Windows Server Service that allows remote attackers to execute arbitrary code via a crafted RPC request that triggers an overflow during path canonicalization.",{"cveId":116,"description":117,"publishedDate":118,"cvssScore":78,"severity":54,"isKev":4,"epssScore":119,"cisaVulnName":120,"cisaDateAdded":109,"cisaShortDescription":121,"cisaRequiredAction":111},"CVE-2009-1537","Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\"","2009-05-29",0.51207,"Microsoft DirectX NULL Byte Overwrite Vulnerability","Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.",{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"severity":54,"isKev":4,"epssScore":79,"cisaVulnName":108,"cisaDateAdded":109,"cisaShortDescription":123,"cisaRequiredAction":111},"Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"severity":54,"isKev":4,"epssScore":129,"cisaVulnName":130,"cisaDateAdded":131,"cisaShortDescription":132,"cisaRequiredAction":133},"CVE-2002-0367","smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges by duplicating a handle to a privileged process, as demonstrated by DebPloit.","2002-06-25",7.8,0.04919,"Microsoft Windows Privilege Escalation Vulnerability","2022-03-03","smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges.","Apply updates per vendor instructions.",{"cveId":135,"description":136,"publishedDate":137,"cvssScore":128,"severity":54,"isKev":4,"epssScore":138,"cisaVulnName":130,"cisaDateAdded":131,"cisaShortDescription":139,"cisaRequiredAction":133},"CVE-2004-0210","The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.","2004-08-06",0.07214,"A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.",{"cveId":141,"description":142,"publishedDate":143,"cvssScore":128,"severity":54,"isKev":4,"epssScore":144,"cisaVulnName":145,"cisaDateAdded":131,"cisaShortDescription":146,"cisaRequiredAction":133},"CVE-2010-0232","The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka \"Windows Kernel Exception Handler Vulnerability.\"","2010-01-21",0.28735,"Microsoft Windows Kernel Exception Handler Vulnerability","The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges.",{"cveId":148,"description":149,"publishedDate":59,"cvssScore":128,"severity":54,"isKev":4,"epssScore":150,"cisaVulnName":151,"cisaDateAdded":131,"cisaShortDescription":152,"cisaRequiredAction":133},"CVE-2009-1123","The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Desktop Vulnerability.\"",0.04878,"Microsoft Windows Improper Input Validation Vulnerability","The kernel in Microsoft Windows does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application.",{"title":154,"metaDescription":155,"keywords":156,"structuredData":157},"Windows 2000 by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Windows 2000 by Microsoft covering 6 versions with 635 tracked vulnerabilities including 1 critical and 7 high-severity issues and 4 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows 2000 vulnerabilities, Windows 2000 security, Windows 2000 CVE, Microsoft Windows 2000, Windows 2000 threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows 2000 KEV, Windows 2000 exploited vulnerabilities",{"@context":158,"@type":159,"name":160,"description":155,"url":161,"manufacturer":162,"applicationCategory":166,"softwareVersion":167,"mainEntity":168},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows 2000","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_2000",{"@type":163,"name":164,"url":165},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","6 versions tracked",{"@type":169,"name":170,"description":171,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows 2000 Security Vulnerabilities","Security vulnerabilities affecting Windows 2000 by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":173,"apiVersion":174},"2026-10-16T23:23:19.126Z","3.0",[176,179],{"product":177,"cves":178},"windows_2000_terminal_services",24,{"product":180,"cves":21},"windows_2000_advanced_server",{"rows":182,"total":212,"capped":18,"failed":11},[183,186,190,195,198,201,204,208],{"cveId":104,"name":108,"severity":54,"cvss":78,"added":109,"epss":107,"published":106,"ranges":184,"hits":185,"checked":18,"covers":18},[],[],{"cveId":41,"name":113,"severity":46,"cvss":44,"added":109,"epss":47,"published":187,"ranges":188,"checked":4,"hits":189,"covers":18},"2008-10-23T22:00:01.357",[],[],{"cveId":116,"name":120,"severity":54,"cvss":78,"added":109,"epss":119,"published":191,"ranges":192,"checked":4,"hits":194,"covers":18},"2009-05-29T18:30:00.187",[193],"all versions",[],{"cveId":75,"name":108,"severity":54,"cvss":78,"added":109,"epss":79,"published":77,"ranges":196,"hits":197,"checked":18,"covers":18},[],[],{"cveId":125,"name":130,"severity":54,"cvss":128,"added":131,"epss":129,"published":127,"ranges":199,"hits":200,"checked":18,"covers":18},[],[],{"cveId":135,"name":130,"severity":54,"cvss":128,"added":131,"epss":138,"published":137,"ranges":202,"hits":203,"checked":18,"covers":18},[],[],{"cveId":141,"name":145,"severity":54,"cvss":128,"added":131,"epss":144,"published":205,"ranges":206,"checked":4,"hits":207,"covers":18},"2010-01-21T19:30:00.9",[],[],{"cveId":148,"name":151,"severity":54,"cvss":128,"added":131,"epss":150,"published":209,"ranges":210,"checked":4,"hits":211,"covers":18},"2009-06-10T18:30:00.327",[],[],8]