CVE-2004-0210highunder attackCWE-120

CVE-2004-0210

Published · Updated

71Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 7.8epss 7.2%
from disclosure to weapon2 days
Published on NVDJul 14
1st PoC+2d
CISA KEV+6441d
exploitation probability
7.2%top 6% of all CVEs
observed exploitation
yesCISA + VulnCheck
1 public exploit(s)
Action required by CISAfederal deadline: 2022-03-24

Apply updates per vendor instructions.

In short

A vulnerability in Windows NT and Windows 2000's POSIX component allows local users to run arbitrary code by exploiting a buffer overflow through specially crafted parameters that modify message length values.

Technical detail

A buffer overflow vulnerability exists in the POSIX subsystem of Windows NT/2000, exploitable by local attackers via manipulation of message length parameters. The vulnerability requires local access and results in arbitrary code execution with the privileges of the affected process.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/24277
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020https://exchange.xforce.ibmcloud.com/vulnerabilities/16590https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210http://www.kb.cert.org/vuls/id/647436http://www.us-cert.gov/cas/techalerts/TA04-196A.html