CVE Catalog
CVE-2000-0331
MediumExploitation Probability (EPSS)
Very high risk7.45%
94th percentile - higher than 94% of all known CVEs
Summary
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable.
Risk Assessment
This vulnerability may lead to system crashes, affecting the availability of services within the organization.
Recommendation
It is recommended to update the operating system to the latest version and restrict access to CMD.EXE for unauthorized users.
Original NVD description (English source)
Buffer overflow in Microsoft command processor (CMD.EXE) for Windows NT and Windows 2000 allows a local user to cause a denial of service via a long environment variable, aka the "Malformed Environment Variable" vulnerability.