CVE-2004-0214

Description

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.

10.0

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 73.83% Top 5%

Vendor Advisory microsoft.com Vendor Advisory microsoft.com Vendor Advisory seclists.org Vendor Advisory seclists.org

Affected: n/a n/a

References

Link	Tags
http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857	vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638	vdb entry signature
http://securitytracker.com/id?1011647	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307	vdb entry signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601	vdb entry signature
http://www.securityfocus.com/bid/10213	vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/17662	vdb entry
http://www.osvdb.org/5687	vdb entry
http://www.kb.cert.org/vuls/id/616200	third party advisory us government resource
http://seclists.org/lists/fulldisclosure/2004/Apr/0933.html	mailing list vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345	vdb entry signature
http://secunia.com/advisories/11482/	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749	vdb entry signature
https://exchange.xforce.ibmcloud.com/vulnerabilities/15956	vdb entry
http://seclists.org/lists/bugtraq/2004/Apr/0322.html	mailing list vendor advisory
http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037	vendor advisory

Frequently Asked Questions

What is the severity of CVE-2004-0214?: CVE-2004-0214 has been scored as a critical severity vulnerability.
How to fix CVE-2004-0214?: To fix CVE-2004-0214, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2004-0214 being actively exploited in the wild?: It is possible that CVE-2004-0214 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~74% probability that this vulnerability will be exploited by malicious actors in the next 30 days.