CVE-2004-0206
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 75%
da publicação à arma76 dias
Publicada no NVD16 de out.
1ª PoC+76d
metasploit12 de out.
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/734exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16371⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://marc.info/?l=bugtraq&m=109786703930674&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031http://secunia.com/advisories/12803/https://exchange.xforce.ibmcloud.com/vulnerabilities/16556https://exchange.xforce.ibmcloud.com/vulnerabilities/17657https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788