CVE-2000-1034: Microsoft Windows 2000

High severity, CVSS 10.0. EPSS: 27.2% chance of exploitation in the next 30 days.

Buffer overflow in the System Monitor ActiveX control in Windows 2000 allows remote attackers to execute arbitrary commands via a long LogFileName parameter in HTML source code, aka the "ActiveX Parameter Validation" vulnerability.

Affected products

• Microsoft Windows 2000: any version

Published 2000-12-11. Last modified 2026-09-23.