Actively exploited · Published Jul 14, 2004 · Assigned by mitre
CVE-2004-0210
High 7.8 Exploited
In plain English
A high-severity buffer overflow in Windows from Microsoft. Attackers are actively exploiting it in the wild (listed by CISA on March 3, 2022). The chance it is exploited in the next 30 days is estimated at 7.2% (higher than 94% of all known vulnerabilities). Apply updates per vendor instructions.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)7.2%top 5.7% of all CVEs
Exploited in the wildYesCISA KEV since Mar 3, 2022
Attack toolingNoneno public tooling known
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Mar 24, 2022.
Official description
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
Affected products (as reported)
Weakness: CWE-120 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- TA04-196A third-party-advisory, x_refsource_CERT
- VU#647436 third-party-advisory, x_refsource_CERT-VN
- oval:org.mitre.oval:def:2166 vdb-entry, signature, x_refsource_OVAL
- MS04-020 vendor-advisory, x_refsource_MS
- oval:org.mitre.oval:def:2847 vdb-entry, signature, x_refsource_OVAL
- win-posix-bo(16590) vdb-entry, x_refsource_XF
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210 government-resource