VulnerabilityModified

CVE-2001-0281

Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow local users to gain privileges.

HIGH 7.2EPSS 4.79%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (4.79%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Format string vulnerability in DbgPrint function, used in debug messages for some Windows NT drivers (possibly when called through DebugMessage), may allow local users to gain privileges.

CVSS 2.0: 7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS: 4.79% probability · 91th percentile
CISA KEV: Not listed
Affected: microsoft/windows nt
Source: cve@mitre.org

References

http://archives.neohapsis.com/archives/bugtraq/2001-02/0379.htmlExploit, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-02/0379.htmlExploit, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.