Microsoft Windows Me vulnerabilities

2 vulnerabilities

Known vulnerabilities in Microsoft Windows Me, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2003-1048microsoftinternet_explorer+7
EPSS score
26.63%
Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.6.8CVE-2002-0862microsoftinternet_explorer+8
EPSS score
15.76%
The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98 through XP, Office for Mac, Internet Explorer for Mac, and Outlook Express for Mac, do not properly verify the Basic Constraints of intermediate CA-signed X.509 certificates, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack for SSL sessions, as originally reported for Internet Explorer and IIS.