Every CVE Search/ Get API key

CVE-2002-2132

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT...

2.1 Low

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.

Exploit likelihood

1.75%Up 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.

Record
CVE-2002-2132
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.

Record
CVE-2002-2132
Updated
2026-11-02
EUVDEUVD-2002-2111 No score

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.

Record
EUVD-2002-2111
Updated
2026-11-03
GitHub AdvisoriesGHSA-2hp7-f2c6-gmcr No score

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT...

Windows File Protection (WFP) in Windows 2000 and XP does not remove old security catalog .CAT files, which could allow local users to replace new files with vulnerable old files that have valid hash codes.

Record
GHSA-2hp7-f2c6-gmcr
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-2132 is a low vulnerability (CVSS 2.1) in Microsoft Windows 2000, published December 31, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.75%, the 78th percentile. No source names a fixed version.

References

MoveEnter Open