VULNERABILITY INTELLIGENCE

CVE-2004-2527

CVSS score5.4 MEDIUM
EPSS probability1.73%
CISA KEVNot currently listed
Published2004-12-31
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:C

Description

The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.

Primary references