Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• microsoft windows 2000all versions
• microsoft windows 2000resource_kit
• microsoft windows 2003 serverdatacenter_edition
• microsoft windows 2003 serverdatacenter_edition_itanium
• microsoft windows 2003 serverenterprise_64-bit
• microsoft windows 2003 serverenterprise_edition
• microsoft windows 2003 serverenterprise_edition_itanium
• microsoft windows 2003 serverr2
• microsoft windows 2003 serversp1
• microsoft windows 2003 serverstandard
• microsoft windows 2003 serverstandard_64-bit
• microsoft windows 2003 serverweb
• microsoft windows xpall versions

Other highest-scoring records for the same primary product.

• CVE-2008-4250The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta aKEV
  99Now
• CVE-2010-0232The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, WindoKEV
  70This week
• CVE-2005-1983Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attack
  68This week
• CVE-2001-0241Buffer overflow in Internet Printing ISAPI extension in Windows 2000 allows remote attackers to gain root privileges via a long print reques
  66This week
• CVE-2006-3439Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including
  65This week
• CVE-2006-4691Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and X
  64This week

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

User content is inserted into the page as HTML. The browser interprets the content as code rather than data.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1commentEl.innerHTML = comment.body;

1commentEl.textContent = comment.body;

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.