← CVE Radar
CVE-2004-0210Microsoft Windows Privilege Escalation Vulnerability
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
7.8 HIGHEPSS 7.21%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 7.2 | HIGH | 2.0NVD | AV:L/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Mar 24, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2004-0210
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Aug 6, 2004
- Last modified
- 2026-06-16 22:05 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
microsoftinterix1 version range
- 2.2
microsoftwindows 20000 version ranges
No version detail published.
microsoftwindows nt1 version range
- 4.0 sp6a
References
- kb.cert.org http://www.kb.cert.org/vuls/id/647436
- us-cert.gov http://www.us-cert.gov/cas/techalerts/TA04-196A.html
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/16590
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210