Microsoft Netmeeting vulnerabilities

11 CVEs affecting Microsoft Netmeeting, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2006-2919, published 2006-06-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2003-0533, published 2004-06-01. High severity, CVSS 7.5. EPSS: 85.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through…
CVE-2003-0719, published 2004-06-01. High severity, CVSS 7.5. EPSS: 81.2% chance of exploitation in the next 30 days. Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server…
CVE-2004-0117, published 2004-06-01. High severity, CVSS 7.5. EPSS: 26.5% chance of exploitation in the next 30 days. Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.
CVE-2006-2919, published 2006-06-09. High severity, CVSS 7.8. EPSS: 22.8% chance of exploitation in the next 30 days. Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via crafted inputs that…
CVE-2000-0983, published 2000-12-19. Medium severity, CVSS 5.0. EPSS: 20.6% chance of exploitation in the next 30 days. Microsoft NetMeeting with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service (CPU utilization) via a sequence of null bytes to the NetMeeting port, aka the…
CVE-2001-0503, published 2001-07-21. Medium severity, CVSS 5.0. EPSS: 17.3% chance of exploitation in the next 30 days. Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the…
CVE-2003-0505, published 2003-08-07. Medium severity, CVSS 5.0. EPSS: 13.5% chance of exploitation in the next 30 days. Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer request.
CVE-1999-0332, published 1998-12-01. High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days. Buffer overflow in NetMeeting allows denial of service and remote command execution.
CVE-2003-0506, published 2003-08-07. Medium severity, CVSS 5.0. EPSS: 10.8% chance of exploitation in the next 30 days. Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the chat conversation.
CVE-1999-1097, published 1999-05-04. Medium severity, CVSS 6.4. EPSS: 3.8% chance of exploitation in the next 30 days. Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is empty.

Latest

CVE-2002-1150, published 2002-10-11. Medium severity, CVSS 4.6. EPSS: 3.8% chance of exploitation in the next 30 days. The Remote Desktop Sharing (RDS) Screen Saver Protection capability for Microsoft NetMeeting 3.01 through SP2 (4.4.3396) allows attackers with physical access to hijack remote sessions by entering…