Unscored CVE-2001-0015 EUVD-2001-0015GHSA-wch8-9qmv-rh9x

Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisibl…

Published May 7, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Network Dynamic Data Exchange (DDE) in Windows 2000 allows local users to gain SYSTEM privileges via a "WM_COPYDATA" message to an invisible window that is running with the privileges of the WINLOGON process.

References

win-dde-elevate-privileges(6062) vdb-entry
2341 vdb-entry
A020501-1 vendor-advisory
MS01-007 vendor-advisory