VulnerabilityModified
CVE-2001-1560
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message.
LOW 2.1EPSS 3.07%
Does this matter?
Lower severity and a low EPSS score (3.07%). Track it; it rarely justifies an emergency change on its own.
Description
Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 3.07% probability · 87th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows 2000 · microsoft/windows xp
- Source
- cve@mitre.org
References
- http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2001-10/0066.htmlExploit
- http://www.iss.net/security_center/static/7409.php
- http://www.securityfocus.com/bid/3481Exploit
- http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2001-10/0066.htmlExploit
- http://www.iss.net/security_center/static/7409.php
- http://www.securityfocus.com/bid/3481Exploit
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.