CVE-2004-0206
high · 7.5Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
7.5
CVSS
74.7%
EPSS (exploit prob.)
99th
EPSS percentile
2004-11-03
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2000 | all versions |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_98 | all versions |
| microsoft | windows_nt | 4.0 |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://marc.info/?l=bugtraq&m=109786703930674&w=2
- http://secunia.com/advisories/12803/
- http://www.kb.cert.org/vuls/id/640488
- http://www.securityfocus.com/bid/11372
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16556
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17657
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788
- http://marc.info/?l=bugtraq&m=109786703930674&w=2
- http://secunia.com/advisories/12803/
- http://www.kb.cert.org/vuls/id/640488
- http://www.securityfocus.com/bid/11372
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16556
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17657
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2004-0206