CVE-2001-1238

Опубликовано: 16 июл. 2001

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

Task Manager in Windows 2000 does not allow local users to end processes with uppercase letters named (1) winlogon.exe, (2) csrss.exe, (3) smss.exe and (4) services.exe via the Process tab which could allow local users to install Trojan horses that cannot be stopped with the Task Manager.

Ссылки

http://www.securityfocus.com/archive/1/197195
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/3033
Broken Link
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6919
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/197195
Broken Link
Third Party Advisory
VDB Entry
Vendor Advisory
http://www.securityfocus.com/bid/3033
Broken Link
Patch
Third Party Advisory
VDB Entry
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6919
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00799

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-178

Связанные уязвимости

GHSA-c8cf-4f7h-ccj4