CVE-2001-1560

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Win32k.sys (aka Graphics Device Interface (GDI)) in Windows 2000 and XP allows local users to cause a denial of service (system crash) by calling the ShowWindow function after receiving a WM_NCCREATE message.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published
Dec 31, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-15617.2Buffer overflow in Xvt 2.1 in Debian Linux 2.2 allows local users to execute arbitrary code via long (1) -name and (2) -T arguments.CVE-2001-15627.2Format string vulnerability in nvi before 1.79 allows local users to gain privileges via format string specifiers in a filename.CVE-2001-15637.5Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet resources. NOTE: due to the CVE-2001-15642.1setrlimit in HP-UX 10.01, 10.10, 10.24, 10.20, 11.00, 11.04 and 11.11 does not properly enforce core file size on processes after setuid or CVE-2001-15652.1Point to Point Protocol daemon (pppd) in MacOS x 10.0 and 10.1 through 10.1.5 provides the username and password on the command line, which CVE-2001-15667.5Format string vulnerability in libvanessa_logger 0.0.1 in Perdition 0.1.8 allows remote attackers to execute arbitrary code via format strinCVE-2001-15675.0Lotus Domino server 5.0.9a and earlier allows remote attackers to bypass security restrictions and view Notes database files and possibly seCVE-2001-15686.4CMG WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which allows CVE-2001-15696.4Openwave WAP gateway does not verify the fully qualified domain name URL with X.509 certificates from root certificate authorities, which alCVE-2001-15702.1Windows XP with fast user switching and account lockout enabled allows local users to deny user account access by setting the fast user switCVE-2001-15715.0The Remote Desktop client in Windows XP sends the most recent user account name in cleartext, which could allow remote attackers to obtain tCVE-2001-15727.5The MAC module in Netfilter in Linux kernel 2.4.1 through 2.4.11, when configured to filter based on MAC addresses, allows remote attackers
CVE-2001-1560: Low severity, CVSS 2.1 | Vulnix