CVE-2002-1230
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.3%
from disclosure to weapon0 days
Published on NVDSep 1
1st PoCAug 6
exploitation probability
2.3%top 18% of all CVEs
observed exploitation
nono source reports it
11 public exploit(s)
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."
Affected products
n/a · n/apublic PoCs found — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21691exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21922exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21923exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21684exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21685exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21686exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21687exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21688exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21689exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/21690cve_referencewww.packetstormsecurity.nl/filedesc/GetAd.c.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://getad.chat.ru/https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A681http://www.ciac.org/ciac/bulletins/n-027.shtmlhttp://www.iss.net/security_center/static/10343.phphttp://www.packetstormsecurity.nl/filedesc/GetAd.c.htmlhttp://www.securityfocus.com/bid/5927