CVE-2004-0206
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 75%
da publicação à arma76 dias
Publicada no NVD16 de out.
1ª PoC+76d
metasploit12 de out.
probabilidade de exploração
75%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/16371não verificadoexploitdbwww.exploit-db.com/exploits/734não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://marc.info/?l=bugtraq&m=109786703930674&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031http://secunia.com/advisories/12803/https://exchange.xforce.ibmcloud.com/vulnerabilities/16556https://exchange.xforce.ibmcloud.com/vulnerabilities/17657https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788