CVE-2000-0663: Microsoft Windows 2000

Medium severity, CVSS 4.6. EPSS: 1.9% chance of exploitation in the next 30 days.

The registry entry for the Windows Shell executable (Explorer.exe) in Windows NT and Windows 2000 uses a relative path name, which allows local users to execute arbitrary commands by inserting a Trojan Horse named Explorer.exe into the %Systemdrive% directory, aka the "Relative Shell Path" vulnerability.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows Nt: version 4.0 only

Published 2000-07-25. Last modified 2026-06-16.