CVE-2004-0206

Description

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 80.40% Top 5%

Vendor Advisory microsoft.com

Affected: n/a n/a

References

Link	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/17657	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592	vdb entry signature
http://www.securityfocus.com/bid/11372	vdb entry
http://www.kb.cert.org/vuls/id/640488	us government resource third party advisory patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852	vdb entry signature
http://marc.info/?l=bugtraq&m=109786703930674&w=2	mailing list
http://secunia.com/advisories/12803/	third party advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031	vendor advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16556	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242	vdb entry signature

Frequently Asked Questions

What is the severity of CVE-2004-0206?: CVE-2004-0206 has been scored as a high severity vulnerability.
How to fix CVE-2004-0206?: To fix CVE-2004-0206, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-0206 being actively exploited in the wild?: It is possible that CVE-2004-0206 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~80% probability that this vulnerability will be exploited by malicious actors in the next 30 days.