CVE-2002-0070: Microsoft Windows 2000

High severity, CVSS 7.6. EPSS: 18.5% chance of exploitation in the next 30 days.

Buffer overflow in Windows Shell (used as the Windows Desktop) allows local and possibly remote attackers to execute arbitrary code via a custom URL handler that has not been removed for an application that has been improperly uninstalled.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 98: any version
• Microsoft Windows 98se: any version
• Microsoft Windows Nt: version 4.0 only

Published 2002-03-15. Last modified 2026-06-16.