CVE-2004-0206
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 75%
from disclosure to weapon76 days
Published on NVDOct 16
1st PoC+76d
metasploitOct 12
exploitation probability
75%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16371unverifiedexploitdbwww.exploit-db.com/exploits/734unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=109786703930674&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031http://secunia.com/advisories/12803/https://exchange.xforce.ibmcloud.com/vulnerabilities/16556https://exchange.xforce.ibmcloud.com/vulnerabilities/17657https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788