Sinon pour répondre à la question il suffit de lire
http://www.microsoft.com/presspass [...] rityqa.asp
Extract :
In February 2002, we will release Windows 2000 Service Pack 3 (SP3), which will have a special focus on security. To that end, we currently are making a detailed, code-level review of all security-sensitive components in Windows 2000, using an advanced software analysis tool we've developed. We are doing whatever is necessary to ensure the process is complete, and updates patching any vulnerabilities we find during this code review are be delivered in SP3.
WW