CVE-2000-1089: Microsoft Windows 2000

High severity, CVSS 10.0. EPSS: 74.6% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, aka the "Phone Book Service Buffer Overflow" vulnerability.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows Nt: version 4.0 only

Published 2001-01-09. Last modified 2026-06-16.