| Metric | ID | Date
Public | Name |
|---|
| 94.5 | VU#254236 | 09/10/2003 | Microsoft Windows RPCSS Service contains heap overflow in DCOM request filename handling |
| 94.5 | VU#483492 | 09/10/2003 | Microsoft Windows RPCSS Service contains heap overflow in DCOM activation routines |
| 78 | VU#117394 | 03/17/2003 | Buffer Overflow in Core Microsoft Windows DLL |
| 58.27 | VU#650769 | 08/08/2006 | Microsoft Windows Server service buffer overflow |
| 58.21 | VU#936529 | 11/16/2007 | Microsoft Jet Engine stack buffer overflow |
| 51.63 | VU#951555 | 12/20/2001 | Microsoft Windows Universal Plug and Play (UPNP) vulnerable to buffer overflow via malformed advertisement packets |
| 47.04 | VU#309739 | 08/12/2008 | Microsoft Color Management System (MSCMS) module remote code execution |
| 46.57 | VU#228028 | 07/13/2004 | Microsoft Windows Task Scheduler Buffer Overflow |
| 45.56 | VU#567620 | 11/11/2003 | Microsoft Windows Workstation service vulnerable to buffer overflow when sent specially crafted network message |
| 45.24 | VU#274496 | 10/12/2004 | Microsoft Excel parameter validation error |
| 44.04 | VU#545228 | 07/13/2009 | Microsoft Office Web Components Spreadsheet ActiveX control vulnerability |
| 43.28 | VU#399260 | 07/24/2002 | Microsoft SQL Server 2000 contains heap buffer overflow in SQL Server Resolution Service |
| 43.28 | VU#484891 | 07/24/2002 | Microsoft SQL Server 2000 contains stack buffer overflow in SQL Server Resolution Service |
| 42.52 | VU#434137 | 04/10/2007 | Microsoft Content Management Server fails to properly process crafted HTTP requests |
| 41.04 | VU#492515 | 01/14/2010 | Microsoft Internet Explorer HTML object memory corruption vulnerability |
| 40.71 | VU#608020 | 06/13/2006 | Microsoft Windows Media Player PNG processing buffer overflow |
| 37.93 | VU#390044 | 06/13/2006 | Microsoft JScript memory corruption vulnerability |
| 37.86 | VU#167928 | 12/05/2006 | Microsoft Word malformed string vulnerability |
| 37.46 | VU#222044 | 06/03/2003 | Microsoft Windows Media Player fails to properly launch URLs based on Dynamic HTML (DHTML) behaviors |
| 33.75 | VU#635463 | 08/10/2000 | Microsoft SQL Server and Microsoft Data Engine (MSDE) ship with a null default password |
| 33.66 | VU#609868 | 07/11/2006 | Microsoft Office string parsing vulnerability |
| 33.41 | VU#682820 | 03/14/2006 | Microsoft Office routing slip buffer overflow |
| 31.64 | VU#467036 | 10/15/2003 | Microsoft Help and Support Center contains buffer overflow in code used to handle HCP protocol |
| 28.43 | VU#238064 | 12/12/2006 | Microsoft Remote Installation Service Writable Path Vulnerability |
| 27.1 | VU#616200 | 10/12/2004 | Microsoft Windows Shell contains a buffer overflow |
| 27 | VU#197852 | 11/14/2006 | Microsoft Internet Explorer fails to properly interpret HTML with certain layout combinations |
| 27 | VU#291396 | 02/14/2006 | Microsoft Windows Media Player vulnerable to buffer overflow in bitmap processing routine |
| 27 | VU#641460 | 04/11/2006 | Microsoft Windows fails to properly handle COM objects |
| 26.73 | VU#932041 | 02/13/2007 | Microsoft MFC component vulnerable to remote code execution via malformed embedded OLE object |
| 25.65 | VU#511577 | 02/13/2007 | Microsoft Malware Protection Engine fails to properly process a specially crafted PDF File |
| 25.51 | VU#187196 | 07/13/2004 | Microsoft Windows fails to properly process showHelp URLs |
| 25.51 | VU#252146 | 01/10/2006 | Microsoft Outlook and Microsoft Exchange TNEF decoding buffer overflow |
| 25.31 | VU#337764 | 07/09/2003 | Microsoft Windows fails to properly validate buffer size of incoming SMB packets |
| 25.24 | VU#543907 | 05/13/2008 | Microsoft Office fails to properly handle specially crafted Rich Text Format files |
| 24.97 | VU#613740 | 02/02/2007 | Microsoft Excel memory access vulnerability |
| 24.3 | VU#155563 | 04/08/2008 | Microsoft Office Project vulnerable to remote code execution via specially crafted Project file |
| 23.72 | VU#378160 | 12/14/2004 | Microsoft Windows Internet Naming Service (WINS) contains a buffer overflow |
| 23.28 | VU#287067 | 10/04/2001 | Microsoft PowerPoint and Excel fail to properly detect macros thereby automatically executing malicious code via crafted document (MS01-050) |
| 22.57 | VU#810772 | 11/14/2006 | Microsoft Agent fails to properly handle specially crafted .ACF files |
| 22.27 | VU#303452 | 05/09/2006 | Microsoft Exchange fails to properly handle vCal and iCal properties |
| 22.03 | VU#271860 | 01/09/2007 | Microsoft Outlook fails to properly parse Office Saved Searches (.oss) files |
| 21 | VU#839284 | 02/14/2006 | Microsoft Windows TCP/IP fails to properly validate IGMP packets |
| 19.23 | VU#176556 | 10/10/2006 | Microsoft Office fails to properly parse malformed records |
| 19.23 | VU#234900 | 10/10/2006 | Microsoft Office fails to properly parse malformed strings |
| 19.23 | VU#807780 | 10/10/2006 | Microsoft Office fails to properly parse malformed Smart Tags |
| 17.95 | VU#534276 | 10/10/2006 | Microsoft Office fails to properly parse malformed chart records |
| 16.82 | VU#804780 | 09/03/2003 | Microsoft Visual Basic for Applications (VBA) does not adequately validate document properties |
| 16.4 | VU#901584 | 12/12/2006 | Microsoft Windows SNMP Memory Corruption Vulnerability |
| 16.2 | VU#253825 | 05/08/2007 | Microsoft Excel fails to properly process files with crafted filter records |
| 16.12 | VU#490628 | 07/14/2005 | Microsoft Windows Remote Desktop Protocol service input validation vulnerability |
| 16.03 | VU#580036 | 07/11/2006 | Microsoft Office fails to properly handle malformed strings |
| 15.18 | VU#138188 | 06/13/2006 | Microsoft Outlook Web Access for Exchange Server script injection vulnerability |
| 14.72 | VU#319385 | 12/11/2007 | Microsoft Windows Media Format Runtime ASF handling buffer overflow |
| 14.63 | VU#416001 | 02/08/2005 | Microsoft Office XP contains buffer overflow vulnerability |
| 14.42 | VU#967668 | 10/15/2003 | Microsoft Windows ListBox and ComboBox controls vulnerable to buffer overflow when supplied crafted Windows message |
| 14.17 | VU#435444 | 10/15/2003 | Microsoft Outlook Web Access (OWA) contains cross-site scripting vulnerability in the "Compose New Message" form |
| 12.82 | VU#908276 | 08/08/2006 | Microsoft Winsock buffer overflow |
| 12.65 | VU#484814 | 05/11/2004 | Microsoft Help and Support Center (HCP) fails to properly validate HCP URLs |
| 12.65 | VU#820628 | 10/10/2006 | Microsoft Server Service fails to properly handle network messages |
| 12.48 | VU#918652 | 07/23/2003 | Microsoft SQL Server becomes unresponsive when large packet is sent to specific named pipe |
| 11.7 | VU#300373 | 06/14/2005 | Microsoft Outlook Web Access vulnerable to cross-site scripting |
| 10.68 | VU#915930 | 01/10/2006 | Microsoft embedded web font buffer overflow |
| 10.6 | VU#139150 | 01/13/2004 | Microsoft Data Access Components (MDAC) contains buffer overflow |
| 9.94 | VU#455516 | 09/12/2006 | Microsoft PGM vulnerable to remote code execution |
| 9.56 | VU#619707 | 02/19/2002 | Microsoft SQL Server contains buffer overflows in openrowset and opendatasource macros |
| 9.56 | VU#228561 | 12/08/2009 | Microsoft Indeo video codecs contain multiple vulnerabilities |
| 9.36 | VU#155252 | 07/02/2003 | Microsoft Windows 2000 SMTP service vulnerable to DoS when processing message with corrupted time stamp |
| 9.28 | VU#627331 | 04/02/2009 | Microsoft Office PowerPoint code execution vulnerability |
| 9 | VU#718542 | 06/14/2005 | Microsoft Agent vulnerable to trusted site spoofing |
| 8.85 | VU#279323 | 07/24/2002 | Microsoft SQL Server contains buffer overflows in several Database Consistency Checkers |
| 8.77 | VU#332404 | 02/09/2007 | Microsoft Word fails to properly handle malformed strings |
| 7.89 | VU#411516 | 08/08/2006 | Microsoft Windows kernel fails to properly manage exception handling |
| 7.48 | VU#869640 | 07/13/2004 | Microsoft Outlook Express fails to properly validate malformed e-mail headers |
| 7.25 | VU#804089 | 12/11/2007 | Microsoft DirectX SAMI parsing buffer overflow |
| 6.88 | VU#926676 | 12/09/2008 | Microsoft WordPad Text Converter vulnerable to remote code execution |
| 6.37 | VU#739844 | 02/14/2006 | Microsoft Windows Korean Input Method Editor vulnerability |
| 5.68 | VU#388900 | 02/14/2006 | Microsoft Web Client Service vulnerable to buffer overflow |
| 5.31 | VU#370308 | 07/24/2002 | Microsoft SQL Server 2000 contains denial-of-service vulnerability in SQL Server Resolution Service |
| 5.13 | VU#466873 | 02/13/2007 | Microsoft Step-by-Step Interactive Training contains a buffer overflow |
| 4.86 | VU#939074 | 02/08/2005 | Microsoft Windows XP named pipe fails to restrict anonymous access |
| 4.72 | VU#581603 | 07/24/2001 | Microsoft Services for UNIX Network File System (NFS) server is vulnerable to denial of service via memory leak |
| 4.25 | VU#994851 | 07/24/2001 | Microsoft Services for UNIX Telnet server is vulnerable to denial of service via memory leak |
| 4.09 | VU#617436 | 01/09/2007 | Microsoft Outlook vulnerable to DoS via a malformed email message |
| 3.44 | VU#555489 | 05/08/2007 | Microsoft Word fails to properly parse crafted rich text content |
| 3.18 | VU#673134 | 10/13/2004 | Microsoft MSN "Hrtbeat.ocx" ActiveX control contains unspecified vulnerability |
| 3.09 | VU#866305 | 05/08/2007 | Microsoft Cryptographic API Component Object Model Certificates ActiveX control contains a remote code execution vulnerability |
| 2.52 | VU#921300 | 10/10/2006 | Microsoft Word vulnerable to remote code execution |
| 2.43 | VU#650181 | 04/12/2005 | Microsoft Object Management DoS Vulnerability |
| 2.36 | VU#119262 | 10/12/2004 | Microsoft Windows kernel fails to reset values in CPU data structures |
| 2.29 | VU#337953 | 04/10/2007 | Microsoft Windows Kernel vulnerable to privilege escalation |
| 2.25 | VU#447569 | 04/09/2003 | Microsoft Windows Virtual Machine (VM) ByteCode Verifier fails to properly check Java applets for malicious code |
| 1.68 | VU#963628 | 02/14/2006 | Microsoft PowerPoint may disclose information in the Temporary Internet Files Folder |
| 1.19 | VU#631516 | 06/13/2006 | Microsoft Routing and Remote Access does not properly handle RPC requests |
| 0.9 | VU#449438 | 09/14/2004 | Microsoft Office WordPerfect 5.x Converter contains a buffer overflow vulnerability |
| 0.6 | VU#899713 | 08/27/2002 | Microsoft Word and Excel documents allow local file reading by via embedded fields |
| 0.39 | VU#348953 | 07/10/2007 | Microsoft Windows Active Directory fails to properly validate client sent LDAP requests |
| 0.37 | VU#768440 | 09/11/2007 | Microsoft Windows Services for UNIX privilege escalation vulnerability |
| 0.07 | VU#219848 | 04/10/2007 | Microsoft Windows Vista CSRSS privilege escalation vulnerability |
| 0 | VU#159484 | 08/08/2006 | Microsoft Visual Basic for Applications buffer overflow |
| 0 | VU#716872 | 09/11/2007 | Microsoft Agent fails to properly handle specially crafted URLs |