CVE-2000-0197

Medium CVSS 4.6

Published 2000-02-14 · last changed 2026-06-16

The fix

We hold no Microsoft remediation data for CVE-2000-0197, which normally means it is not a Windows CVE. For non-Microsoft software the fix is the vendor's own updated release, and the affected versions are listed below.

What it is

The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.

Sources

NVD record for CVE-2000-0197

CVSS vector: AV:L/AC:L/Au:N/C:P/I:P/A:P