CVE-2004-0206 Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or local...
HighCVSS 7.5
EPSS 74.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20041013 Microsoft Windows NetDDE Service Buffer Overflow mailing-list
- 12803 third-party-advisory
- VU#640488 patch third-party-advisory us-government-resource
- 11372 vdb-entry
- MS04-031 vendor-advisory
- win-netdde-bo(16556) vdb-entry
- win-ms04031-patch(17657) vdb-entry
- oval:org.mitre.oval:def:1852 signature vdb-entry
- oval:org.mitre.oval:def:2394 signature vdb-entry
- oval:org.mitre.oval:def:3120 signature vdb-entry
- oval:org.mitre.oval:def:3242 signature vdb-entry
- oval:org.mitre.oval:def:4592 signature vdb-entry
- oval:org.mitre.oval:def:5074 signature vdb-entry
- oval:org.mitre.oval:def:6788 signature vdb-entry