Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka th

Summary

Microsoft Windows 9x operating systems allow an attacker to cause a denial of service via a pathname that includes file device names, aka the "DOS Device in Path Name" vulnerability.

Timeline

1. Mar 4, 2000Public exploit on Exploit-DB

   EDB-19799

2. Jul 12, 2000, 4:00 AM UTCCVE published
3. Aug 8, 2024, 5:05 AM UTCRecord last updated
4. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a n/a

  Version range not reported

References 5