CVE-2000-1034 Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Param...
HighCVSS 10.0
EPSS 27.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
References
- system-monitor-activex-bo(5467) vdb-entry
- 20001106 System Monitor ActiveX Buffer Overflow Vulnerability mailing-list
- MS00-085 vendor-advisory
- 1899 exploit patch vdb-entry vendor-advisory