First published: Thu Apr 20 2000(Updated: )
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 2000 Terminal Services | ||
Microsoft Windows 2000 | ||
Microsoft Windows NT | =4.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2000-0331 has a severity rating that indicates it can lead to denial of service due to potential system instability.
CVE-2000-0331 affects local users of Microsoft Windows 2000 and Windows NT 4.0.
To mitigate CVE-2000-0331, it is recommended to apply the latest security patches provided by Microsoft for the affected operating systems.
CVE-2000-0331 cannot be exploited remotely as it requires local access to the system.
Symptoms of CVE-2000-0331 may include system crashes or unresponsive behavior when large environment variables are processed.