Join or Sign In

Sign in to add and modify your software

Continue with email

By joining Download.com, you agree to our Terms of Use and acknowledge the data practices in our Privacy Policy.

Windows 2000 Network DDE Vulnerability Patch

By Microsoft Free

Developer's Description

Network Dynamic Data Exchange (DDE) is a technology that enables applications on different Windows computers to dynamically share data. This sharing is effected via communications channels called trusted shares, which are managed by a service called the Network DDE Agent. By design, processes on the local machine can levy requests upon the Network DDE Agent, including ones that indicate what application should be run in conjunction with a particular trusted share. However, a vulnerability exists because, in Windows 2000, the Network DDE Agent runs using the Local System security context and processes all requests using this context, rather than that of the user. This would give an attacker an opportunity to cause the Network DDE Agent to run code of her choice in Local System context, as a means of gaining complete control over the local machine.

Microsoft recommends that customers using Windows 2000 workstations or who allow unprivileged users to run code on Windows 2000 servers apply the patch immediately. In addition, customers operating Windows 2000 Web servers should consider applying the patch to those machines as well, as a precautionary measure.

Full Specifications

What's new in version MS01-007 (2/9/01)

General

Release December 5, 2008
Date Added June 29, 2001
Version MS01-007 (2/9/01)

Operating Systems

Operating Systems Windows, Windows 2000
Additional Requirements Windows 2000 Professional/Server/Advanced Server

Popularity

Total Downloads 10,741
Downloads Last Week 0
Report Software

Related Software

AVG Antivirus Business Edition

Free to try
AVG Antivirus Business Edition

Pulse Secure for Windows 10

Free
Pulse Secure for Windows 10

Metasploit

Free
Metasploit

Trusteer Rapport

Purchase
Trusteer Rapport

Best VPN Services for 2021

Best for privacy

3 months free with 1-year plan

Best for customer support

$39.99 for the first 12 months

Best for zero logs

$4.87.99/months for a 1-year plan

Best money-back guarantee

$2.99/months for a 3-year plan