CVE-2004-0210

high

Description

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

References

Advisories
More

https://exchange.xforce.ibmcloud.com/vulnerabilities/16590

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020

http://www.kb.cert.org/vuls/id/647436

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-0210

http://www.us-cert.gov/cas/techalerts/TA04-196A.html

Details

Source: Mitre, NVD

Published: 2004-08-06

Updated: 2026-06-16

Known Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H