CVE-2004-0210

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 16, 2026

Description

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.kb.cert.org/vuls/id/647436Patch, Third Party Advisory, US Government Resource
http://www.us-cert.gov/cas/techalerts/TA04-196A.htmlBroken Link, Patch, Third Party Advisory, US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16590Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847Broken Link
http://www.kb.cert.org/vuls/id/647436Patch, Third Party Advisory, US Government Resource
http://www.us-cert.gov/cas/techalerts/TA04-196A.htmlBroken Link, Patch, Third Party Advisory, US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16590Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847Broken Link
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210US Government Resource

Timeline

Published: Aug 6, 2004
Last modified: Jun 16, 2026
Added to CISA KEV: Mar 3, 2022
NVD status: Analyzed

Related CVEs from 2004

CVE-2004-02112.1The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denia CVE-2004-021210.0Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote CVE-2004-02137.8Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to g CVE-2004-021410.0Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote mal CVE-2004-02155.0Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.CVE-2004-021610.0Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code CVE-2004-02177.0The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or ap CVE-2004-02185.0isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-len CVE-2004-02195.0isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC CVE-2004-022010.0isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request p CVE-2004-02215.0isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload c CVE-2004-02225.0Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via cert