CVE-2002-1230
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as…
Does this matter?
Lower severity and a low EPSS score (2.35%). Track it; it rarely justifies an emergency change on its own.
Description
NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.35% probability · 83th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows 2000 · microsoft/windows 2000 terminal services
- Source
- cve@mitre.org
References
- http://getad.chat.ru/
- http://www.ciac.org/ciac/bulletins/n-027.shtml
- http://www.iss.net/security_center/static/10343.phpVendor Advisory
- http://www.packetstormsecurity.nl/filedesc/GetAd.c.htmlVendor Advisory
- http://www.securityfocus.com/bid/5927
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A681
- http://getad.chat.ru/
- http://www.ciac.org/ciac/bulletins/n-027.shtml
- http://www.iss.net/security_center/static/10343.phpVendor Advisory
- http://www.packetstormsecurity.nl/filedesc/GetAd.c.htmlVendor Advisory
- http://www.securityfocus.com/bid/5927
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A681
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.