Buffer Overrun In HTML Converter New
A security vulnerability exists in the in-built HTML conversion function in all versions of Microsoft Windows. The flaw could allow an attacker to run code of their choice on the system by sending a malformed e-mail.

Flaw in Windows Me Help and Support Center New
A security vulnerability is present in the Windows Me version of Help and Support Center, and results because the URL Handler for the "hcp://" prefix contains an unchecked buffer.

Unchecked Buffer in Windows Help New
The HTML Help facility in Windows includes an ActiveX control that provides much of its functionality. One of the functions exposed via the control contains an unchecked buffer, which could be exploited by a web page hosted on an attackers site or sent to a user as an HTML mail.

Unchecked Buffer in File Decompression Functions New
The ZIP file decompression functions of Windows 98, Me and XP are vulnerable to a buffer overrun attack which could allow an attacker to run the code of their choice on the system.

Flaw in Certificate Enrollment Control New
A security vulnerability exists in the ActiveX Certificate Enrollment Control which is included in all versions of Windows. A remote attacker could exploit the flaw to corrupt and modify certificates on the users system.

Unchecked Buffer in Windows Shell Could Lead to Code Execution New
An unchecked buffer in the Windows shell may allow malicious users to exploit a flaw in one of the functions that helps locate incompletely removed applications. The flaw could cause the shell to crash or for code to be executed using the user's privileges.

Unchecked Buffer in SNMP Service New
A security vulnerability exists in the Simple Network Management Protocol (SNMP) agent service that parses incoming commands. By sending a specially malformed request, it could be possible to conduct a buffer overrun attack against an affected system.

Unchecked Buffer in Universal Plug and Play Service New
Two security vulnerabilities exist in the Universal Plug and Play (UPnP) service on Windows 98, Me and XP which could allow a malicious user to compromise the system.

Invalid Universal Plug and Play (UPnP) Request New
A vulnerability exists in the Universal Plug and Play (UPnP) service which could allow a malicious remote or local user to degrade system performance by issuing an invalid UPnP request.

Passwords for Compressed Folders are Recoverable
A security vulnerability exists in the folder compression feature of Windows Me and Plus 98! which could allow a user to retrieve the passwords by simple inspection of a log file.

Web Client NTLM Authentication Vulnerability New
A security vulnerability exists in a component that ships with Microsoft® Office 2000, Windows 2000, and Windows Me which could allow a malicious user to obtain cryptographically protected logon credentials from another user when requesting an Office document from a web server.

Incomplete TCP/IP Packet Vulnerability
A security vulnerability exists in Microsoft® Windows NT 4.0 and Windows 95, 98, 98 Second Edition, and Windows Me which could allow a malicious user to temporarily prevent an affected machine from providing any networking services or cause it to stop responding entirely.

HyperTerminal Buffer Overflow Vulnerability
A security vulnerability exists in the HyperTerminal application which allow a malicious user to execute arbitrary code on another user’s system.

WebTV for Windows Denial of Service Vulnerability
A security vulnerability exists in Microsoft® WebTV for Windows which could allow a malicious user to remotely crash systems running WebTV for Windows.

Malformed IPX NMPI Packet Vulnerability
A security vulnerability exists in Microsoft® Windows 95, Windows 98, 98SE and Windows Me which could be used to cause an affected system to fail, and depending on the number of affected machines on a network, potentially could be used to flood the network with superfluous data.

Share Level Password Vulnerability
A security vulnerability in Microsoft® Windows 95, 98, 98SE, and Windows Me which could allow a malicious user to programmatically access a Windows 9x/Me file share without knowing the entire password assigned to that share.

Malformed IPX Ping Packet Vulnerability
A security vulnerability exists in Microsoft® Windows 95, 98 and 98SE which could be used to cause an affected system to fail, and depending on the number of affected machines on a network, potentially could be used to flood the network with superfluous data.

DOS Device in Path Name Vulnerability
A security vulnerability exists in Windows 95, 98 and 98 SE which could cause a user’s system to crash, if they attempted to access a file or folder whose path contained certain reserved words.

Legacy Credential Caching Vulnerability
A security vulnerability exists in Microsoft® Windows® 95 and 98 caused by a legacy mechanism for caching network security credentials which, if exploited, could allow a user's plaintext network password to be retrieved from the cache.

File Access URL Vulnerability
A vulnerability exists in Microsoft Windows 95 and Windows 98 that could allow a malicious web site or e-mail message to cause the Windows machine to crash, or to run arbitrary code.

Malformed Telnet Argument Vulnerability
The Telnet client that ships as part of Windows 95 and 98 has an unchecked buffer. A specially-malformed argument could be passed to the client via a web page in order to cause arbitrary code to execute on the computer via a classic buffer overrun technique.

File Access Vulnerability in Personal Web Server
A vulnerability exists in certain versions of Personal Web Server running under Windows® 95 or Windows 98, which could allow files on the server to be read by an unauthorized user who knew the name of the file and requested it via a specific non-standard URL.