CVE-2002-0034: Microsoft Windows 2000

Medium severity, CVSS 4.6. EPSS: 1.9% chance of exploitation in the next 30 days.

The Microsoft CONVERT.EXE program, when used on Windows 2000 and Windows XP systems, does not apply the default NTFS permissions when converting a FAT32 file system, which could cause the conversion to produce a file system with less secure permissions than expected.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows XP: any version

Published 2004-02-03. Last modified 2026-06-16.