CVE-2004-0210

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 7,2%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada microsoft interix, microsoft windows 2000 +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 3 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

Rincian

Terbit di NVD

6 Agustus 2004

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

EPSS (30 hari)

7,2% peluang dieksploitasi; lebih tinggi dari 94,1% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Microsoft Windows Privilege Escalation Vulnerability

Masuk KEV

3 Maret 2022

Tenggat CISA

24 Maret 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020 patch · advisory vendor
• http://www.kb.cert.org/vuls/id/647436 patch · advisory pihak ketiga · pemerintah AS
• http://www.us-cert.gov/cas/techalerts/TA04-196A.html broken link · patch · advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210 pemerintah AS
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16590 advisory pihak ketiga · vdb entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166 broken link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847 broken link