Unscored severity · published Jun 1, 2004
CVE-2004-0117
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code
–
CVSS
26.5%
EPSS
No
On KEV
Description
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.
Exploitation
Is it being used?
Exploit prediction (EPSS)26.5% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netmeeting · Microsoft
through 3 · source: NVD
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
W2
Windows 2003 Server · Microsoft
r2 · source: NVD
W9
Windows 98 · Microsoft
All versions, or not specified · source: NVD
WM
Windows ME · Microsoft
All versions, or not specified · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0117
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0117
www.ciac.org
http://www.ciac.org/ciac/bulletins/o-114.shtml
Patch
http://www.kb.cert.org/vuls/id/353956
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA04-104A.html
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/15710
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A907
More from Netmeeting
–
CVE-2006-2919
Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via…
–
CVE-2003-0533
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a,…
–
CVE-2003-0719
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4,…
–
CVE-2003-0505
Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer…
–
CVE-2003-0506
Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the…