CVE-2004-0210: Microsoft Windows Privilege Escalation Vulnerability

High severity · published Jul 14, 2004

CVE-2004-0210

Microsoft Windows Privilege Escalation Vulnerability

In wildKEV

7.8

CVSS

7.2%

EPSS

Yes

On KEV

Description

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)7.2% · higher than 94% of CVEs

Exploited in the wildYes

CISA KEVListed Mar 3, 2022

Federal remediation dueMar 24, 2022

Ransomware campaign useNot known

Affected products

Which versions

Windows · Microsoft

All versions, or not specified · source: KEV

Interix · Microsoft

2.2 · source: NVD

Windows 2000 · Microsoft

All versions, or not specified · source: NVD

Windows NT · Microsoft

4.0; 4.0; 4.0 · source: NVD

Affected product

Windows

Microsoft

All Windows CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2004-0210

CVE.org

https://www.cve.org/CVERecord?id=CVE-2004-0210

CISA KEV catalogue

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Patch

http://www.kb.cert.org/vuls/id/647436

Broken Link

http://www.us-cert.gov/cas/techalerts/TA04-196A.html

Patch

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/16590

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847