CVE-2004-0214
Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 47.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 46.98% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/internet explorer · microsoft/windows 2000 · microsoft/windows 98 · microsoft/windows me · microsoft/windows xp
- Source
- cve@mitre.org
References
- http://seclists.org/lists/bugtraq/2004/Apr/0322.htmlVendor Advisory
- http://seclists.org/lists/fulldisclosure/2004/Apr/0933.htmlVendor Advisory
- http://secunia.com/advisories/11482/
- http://securitytracker.com/id?1011647
- http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857
- http://www.kb.cert.org/vuls/id/616200US Government Resource
- http://www.osvdb.org/5687
- http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html
- http://www.securityfocus.com/bid/10213
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17662
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307
- http://seclists.org/lists/bugtraq/2004/Apr/0322.htmlVendor Advisory
- http://seclists.org/lists/fulldisclosure/2004/Apr/0933.htmlVendor Advisory
- http://secunia.com/advisories/11482/
- http://securitytracker.com/id?1011647
- http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857
- http://www.kb.cert.org/vuls/id/616200US Government Resource
- http://www.osvdb.org/5687
- http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html
- http://www.securityfocus.com/bid/10213
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17662
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.