CVE-2004-0210

HIGHCISA KEV

7.8

Beschreibung

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

CVE Details

CVSS v3.1 Bewertung7.8

SchweregradHIGH

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionNONE

Veroffentlicht8/6/2004

Zuletzt geandert4/16/2026

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerMicrosoft

ProduktWindows

SchwachstellennameMicrosoft Windows Privilege Escalation Vulnerability

KEV Aufnahmedatum2022-03-03

Behebungsfrist2022-03-24

Ransomware-NutzungUnknown

Betroffene Produkte

microsoft:interixmicrosoft:windows_2000microsoft:windows_nt

Schwachen (CWE)

CWE-120CWE-120

Referenzen

http://www.kb.cert.org/vuls/id/647436(cve@mitre.org)

http://www.us-cert.gov/cas/techalerts/TA04-196A.html(cve@mitre.org)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16590(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166(cve@mitre.org)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847(cve@mitre.org)

http://www.kb.cert.org/vuls/id/647436(af854a3a-2127-422b-91ae-364da2661108)

http://www.us-cert.gov/cas/techalerts/TA04-196A.html(af854a3a-2127-422b-91ae-364da2661108)

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/16590(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166(af854a3a-2127-422b-91ae-364da2661108)

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.