7.2
CVSSv2

CVE-1999-0382

Published: 12/03/1999 Updated: 12/10/2018
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The screen saver in Windows NT does not verify that its security context has been changed properly, allowing malicious users to run programs with elevated privileges.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows nt 3.5.1

microsoft windows nt 4.0

Exploits

source: wwwsecurityfocuscom/bid/474/info When the computer is idle for the set time period (user definable) Winlogonexe starts the screensaver The screen saver process is selectable by the user Winlogonexe uses the CreateProcessAPI call to start the screen saver and immediately suspends it At this point the screen saver is running wi ...