Vulnerability in Microsoft Windows 2000
CVE-2001-0015
Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process.
EPSS: 0.032 (86.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_2000
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_ATSTAKE, Exploit, vendor-advisory, Patch, Vendor Advisory)
- cve@mitre.org (x_refsource_MS, vendor-advisory)