What is CVE-2002-2077?

CVE-2002-2077 is a vulnerability in Microsoft Windows 2000. Published 2002-12-31.

Is CVE-2002-2077 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Windows 2000

CVE-2002-2077

The DCOM client in Windows 2000 before SP3 does not properly clear memory before sending an "alter context" request, which may allow remote attackers to obtain sensitive information by sniffing the session.

EPSS: 0.159 (96.5th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_2000
N/a — versions n/a

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (x_refsource_BINDVIEW, vendor-advisory, Patch, Vendor Advisory)
cve@mitre.org (vendor-advisory, x_refsource_MSKB)
cve@mitre.org (Patch, vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2002-2077?: CVE-2002-2077 is a vulnerability in Microsoft Windows 2000. Published 2002-12-31.
Is CVE-2002-2077 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.