Windows 2000

Vendor:

First CVE: Jan 1, 1997 · Active for 29 years

635

Total CVEs

More Total CVEs than 100% of tracked products

39.7

Avg CVEs / Year

Higher CVE frequency than 99% of tracked products

7.2

Avg CVSS

Higher Avg CVSS than 45% of tracked products

1.3%

KEV Rate

Higher KEV Rate than 96% of tracked products

Trends Over Time

The number and severity of CVEs published that impact Windows 2000 over time

Volume of CVEsAvg CVSS Base Score

First CVE

Jan 1, 1997

29 years ago

Most Recent CVE

Apr 23, 2014

4,475 days ago

CVE Severity & Scoring

Windows 2000635 CVEs

29%

65%

All CVEs352,294 CVEs

45%

40%

11%

LowMediumHighCritical

Attack Vector

Local13 (2.0%)

Network34 (5.4%)

Unknown588 (92.6%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low37 (5.8%)

High10 (1.6%)

Unknown588 (92.6%)

User Interaction

None33 (5.2%)

Unknown588 (92.6%)

Required14 (2.2%)

Privileges Required

Low11 (1.7%)

High0 (0.0%)

None36 (5.7%)

Unknown588 (92.6%)

Top CVEs

Signals from CVEs in this product scope (635 CVEs).

635 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2010-0249HIGH Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP	Jan 15, 2010	8.8	98	YES	YES
CVE-2008-4250CRITICAL The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitr	Oct 23, 2008	9.8	98	YES	YES
CVE-2010-0806HIGH Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via ve	Mar 10, 2010	8.8	97	YES	YES
CVE-2010-0232HIGH The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows	Jan 21, 2010	7.8	89	YES	YES
CVE-2003-0352HIGH Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message	Aug 18, 2003	7.5	89	NO	YES
CVE-2009-3023HIGH Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (	Aug 31, 2009	9.0	88	NO	YES
CVE-2009-1122HIGH The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication,	Jun 10, 2009	7.5	88	NO	YES
CVE-2009-1537HIGH Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Wi	May 29, 2009	8.8	87	YES	NO
CVE-2008-1447MEDIUM The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; an	Jul 8, 2008	6.8	87	NO	YES
CVE-2005-1983HIGH Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a craf	Aug 10, 2005	10.0	87	NO	YES

View all 635 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (635 CVEs).

CISA KEV

8 CVEs

1.3% of CVEs· 96th percentile

Metasploit

49 CVEs

7.7% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

208 CVEs

32.8% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (635 CVEs).

Media Mentions

Signals from CVEs in this product scope (635 CVEs).

Top CNAs Publishing CVEs For Windows 2000

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
sp4	3	6.3	10.4%	1
resource_kit	1	4.3	23.2%	1
2000.2072	2	5.0	19.0%	2
2000.2031	1	5.0	22.0%	1
2000.0.2195	2	5.0	19.0%	2