CVE-2004-0210
High 7.8 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Microsoft Windows Privilege Escalation Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.
Metrics
- CVSS 3.1
-
7.8 (HIGH)
Score source: NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 7% (percentile: 94) as of 1 November 2026
- CWE
- CWE-120
Affected products
microsoft: interix; microsoft: windows 2000; microsoft: windows nt
References
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-0… PatchVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-0… PatchVendor Advisory
- http://www.kb.cert.org/vuls/id/647436 PatchThird Party AdvisoryUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA04-196A.html Broken LinkPatchThird Party AdvisoryUS Government Resource
- http://www.kb.cert.org/vuls/id/647436 PatchThird Party AdvisoryUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA04-196A.html Broken LinkPatchThird Party AdvisoryUS Government Resource
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16590 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%… Broken Link
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%… Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16590 Third Party AdvisoryVDB Entry