VDB
CVE-2004-0210
CVE-2004-0210
PUBLISHED
KEV
CVSS 7.199999809265137 HIGH
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
EPSS 6.79% · 91.5th percentile
Risk Scores
CVSS 2.0
7.199999809265137
EPSS Score
6.79%
91.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| microsoft | interix | 2.2 |
| n/a | n/a | * |
| microsoft | windows_nt | 4.0, 4.0, 4.0 |
| microsoft | windows_2000 |
Timeline
- Jul 14, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 3, 2022 CISA KEV Added
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jun 14, 2023 PoC Published
- Sep 8, 2023 EPSS Score
References
- TA04-196A third-party-advisory
- VU#647436 third-party-advisory
- oval:org.mitre.oval:def:2166 vdb
- MS04-020 vendor-advisory
- oval:org.mitre.oval:def:2847 vdb
- win-posix-bo(16590) vdb
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210 url
- https://nvd.nist.gov/vuln/detail/CVE-2004-0210 advisory