CVE-2000-0331 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Windows NT
3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
17.2%
top 4.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 20
Latest updateApr 30
Description
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
CVSS vector
AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9