CVE-2004-0210 | BDVDB-2026-6612 Detail
MicrosoftWindows
Description#
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: local.
Weaknesses#
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
References#
- http://www.us-cert.gov/cas/techalerts/TA04-196A.html
- http://www.kb.cert.org/vuls/id/647436
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16590
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.