* SP1 64-bit * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2008-4609	16	DoS	2008-10-20	2021-07-07	7.1	None	Remote	Medium	Not required	None	None	Complete
The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress.
2	CVE-2006-3880		DoS	2006-07-27	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
DISPUTED Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous stream of packets on TCP port 135 that have incorrect TCP header checksums and random numbers in certain TCP header fields, as demonstrated by the Achilles Windows Attack Tool. NOTE: the researcher reports that the Microsoft Security Response Center has stated "Our investigation which has included code review, review of the TCPDump, and attempts on reproing the issue on multiple fresh installs of various Windows Operating Systems have all resulted in non confirmation."
3	CVE-2006-3351		DoS Exec Code Overflow	2006-07-06	2018-10-18	5.4	None	Remote	High	Not required	None	None	Complete
Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.
4	CVE-2006-2378		Exec Code Overflow	2006-06-13	2021-07-23	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
5	CVE-2006-1184		DoS	2006-05-10	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash) via a BuildContextW request with a large (1) UuidString or (2) GuidIn of a certain length, which causes an out-of-range memory access, aka the MSDTC Denial of Service Vulnerability. NOTE: this is a variant of CVE-2005-2119.
6	CVE-2006-0034	119	Exec Code Overflow	2006-05-10	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and Windows 2000 SP2 and SP3 allows remote attackers to execute arbitrary code via a long fifth argument to the BuildContextW or BuildContext opcode, which triggers a bug in the NdrAllocate function, aka the MSDTC Invalid Memory Access Vulnerability.
7	CVE-2006-0021	119	DoS Overflow	2006-02-14	2018-10-19	7.8	None	Remote	Low	Not required	None	None	Complete
Microsoft Windows XP SP1 and SP2, and Server 2003 up to SP1, allows remote attackers to cause a denial of service (hang) via an IGMP packet with an invalid IP option, aka the "IGMP v3 DoS Vulnerability."
8	CVE-2005-2388		Exec Code Overflow	2005-07-27	2019-04-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in a certain USB driver, as used on Microsoft Windows, allows attackers to execute arbitrary code.
9	CVE-2005-1935		Exec Code Overflow	2005-06-13	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as demonstrated using a SPNEGO token with a constructed bit string during HTTP authentication, and a different vulnerability than CVE-2003-0818. NOTE: the researcher has claimed that MS:MS04-007 fixes this issue.
10	CVE-2005-1649		DoS	2005-05-18	2017-01-20	5.0	None	Remote	Low	Not required	None	None	Partial
The IPv6 support in Windows XP SP2, 2003 Server SP1, and Longhorn, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and the same destination and source address and port, a variant of CVE-2005-0688 and a reoccurrence of the "Land" vulnerability (CVE-1999-0016).
11	CVE-2005-1218		DoS	2005-08-10	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.
12	CVE-2005-1214		Exec Code	2005-06-14	2019-04-30	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.
13	CVE-2005-1212		Exec Code Overflow	2005-06-14	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.
14	CVE-2005-1208		Exec Code Overflow	2005-06-14	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
15	CVE-2005-0416		Exec Code Overflow	2005-04-27	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code via the AnimationHeaderBlock length field, which leads to a stack-based buffer overflow.
16	CVE-2005-0063		Exec Code	2005-05-02	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.
17	CVE-2005-0061		+Priv	2005-05-02	2019-04-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.
18	CVE-2005-0060		Overflow +Priv	2005-05-02	2019-04-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.
19	CVE-2005-0059		Exec Code Overflow	2005-05-02	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.
20	CVE-2005-0057		Exec Code Overflow	2005-05-02	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.
21	CVE-2005-0053		Exec Code	2005-05-02	2021-07-23	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulnerability."
22	CVE-2005-0051		+Info	2005-05-02	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the "Named Pipe Vulnerability."
23	CVE-2005-0048		DoS Exec Code	2005-05-02	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the "IP Validation Vulnerability."
24	CVE-2005-0047		Exec Code	2005-05-02	2019-04-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."
25	CVE-2005-0045		Exec Code	2005-05-02	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.
26	CVE-2005-0044		Exec Code	2005-05-02	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."
27	CVE-2004-1361		Exec Code Overflow	2004-12-23	2019-04-30	5.0	None	Remote	Low	Not required	None	Partial	None
Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.
28	CVE-2004-1319			2004-12-15	2019-04-30	5.0	None	Remote	Low	Not required	None	Partial	None
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
29	CVE-2004-1306		Exec Code Overflow	2004-12-31	2019-04-30	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file.
30	CVE-2004-1305		DoS	2004-12-23	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
31	CVE-2004-0979			2004-12-31	2021-07-23	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.
32	CVE-2004-0901		Exec Code	2005-01-10	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.
33	CVE-2004-0894		+Priv	2005-01-10	2019-04-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.
34	CVE-2004-0893		+Priv	2005-01-10	2019-04-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."
35	CVE-2004-0839			2004-08-18	2021-07-23	5.0	None	Remote	Low	Not required	None	Partial	None
Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".
36	CVE-2004-0790		DoS	2005-04-12	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.
37	CVE-2004-0571		Exec Code	2005-01-10	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.
38	CVE-2004-0568		Exec Code Overflow	2005-01-10	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.
39	CVE-2004-0212		Exec Code Overflow	2004-08-06	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.
40	CVE-2004-0202		DoS	2004-08-06	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
41	CVE-2004-0201		Exec Code Overflow	2004-08-06	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
42	CVE-2004-0200		Exec Code Overflow	2004-09-28	2018-10-30	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.
43	CVE-2004-0199		Exec Code	2004-06-14	2018-10-12	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
44	CVE-2003-0824		DoS	2003-12-15	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePoint Team Services 2002, allows remote attackers to cause a denial of service (response failure) via a certain request.
45	CVE-2003-0822		Exec Code Overflow	2003-12-15	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
46	CVE-2003-0818		Exec Code Overflow	2004-03-03	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.
47	CVE-2003-0813		DoS	2003-11-17	2019-04-30	5.1	None	Remote	High	Not required	Partial	Partial	Partial
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
48	CVE-2003-0812		Exec Code Overflow	2003-12-15	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary code via RPC calls that cause long entries to be written to a debug log file ("NetSetup.LOG"), as demonstrated using the NetAddAlternateComputerName API.
49	CVE-2003-0717		Exec Code Overflow	2003-11-17	2019-04-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
50	CVE-2003-0715		Exec Code Overflow	2003-09-17	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528.

Total number of vulnerabilities : 62 Page : 1 (This Page)2