Microsoft: >> Windows 98 Security Vulnerabilities
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
CVSS Score
4.6
EPSS Score
0.003
Published
1999-12-10
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
CVSS Score
7.8
EPSS Score
0.243
Published
1999-11-29
Buffer overflow in Microsoft Rich Text Format (RTF) reader allows attackers to cause a denial of service via a malformed control word.
CVSS Score
5.0
EPSS Score
0.166
Published
1999-11-17
The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name string, aka the "File Access URL" vulnerability.
CVSS Score
7.6
EPSS Score
0.229
Published
1999-11-12
Buffer overflow in Microsoft Telnet client in Windows 95 and Windows 98 via a malformed Telnet argument.
CVSS Score
2.6
EPSS Score
0.231
Published
1999-08-16
Denial of service in various Windows systems via malformed, fragmented IGMP packets.
CVSS Score
7.8
EPSS Score
0.341
Published
1999-07-03
A remote attacker can disable the virus warning mechanism in Microsoft Excel 97.
CVSS Score
2.6
EPSS Score
0.066
Published
1999-05-07
Remote attackers can perform a denial of service in Windows machines using malicious ARP packets, forcing a message box display for each packet or filling up log files.
CVSS Score
5.0
EPSS Score
0.073
Published
1999-04-12
Windows 95, 98, and NT 4.0 allow remote attackers to cause a denial of service by spoofing ICMP redirect messages from a router, which causes Windows to change its routing tables.
CVSS Score
5.0
EPSS Score
0.091
Published
1999-03-08
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service (traffic amplification) via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
CVSS Score
5.0
EPSS Score
0.191
Published
1999-02-06