7.6high

CVE-2000-0330in critical feed2 exploits

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File…

Published 26 y ago · modified 4 mo ago · JSON

CVSS
7.6
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
15.0%
percentile 97%
Public exploits
2
Exploit-DB

Summary

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.

Exploit prediction (EPSS)

15.02% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-19608 Microsoft Windows 95/98 - UNC Buffer Overflow (2) · remote · 1999-11-09
  • EDB-19607 Microsoft Windows 95/98 - UNC Buffer Overflow (1) · remote · 1999-11-09

CVSS scores

Assigned byVersionScoreVector
NVD2.07.6AV:N/AC:H/Au:N/C:C/I:C/A:C

References

  • docs.microsoft.com /en-us/security-updates/securitybulletins/1999/ms99-049 · vendor-advisory, x_refsource_MS, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.