VULNERABILITY INTELLIGENCE
CVE-2004-0210
CVSS score7.8 HIGH
EPSS probability7.21%
CISA KEVKnown exploited vulnerability
Published2004-08-06
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
Microsoft Windows Privilege Escalation Vulnerability
Vendor / product: Microsoft / Windows
Description
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
Weakness classification
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Primary references
- cve@mitre.org — Patch, Third Party Advisory, US Government Resource
- cve@mitre.org — Broken Link, Patch, Third Party Advisory, US Government Resource
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Patch, Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link