CVE-2004-0210

microsoft interix, microsoft windows 2000, microsoft windows nt

Published 6 Aug 2004 · updated 16 Jun 2026 · Analyzed

7.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 3 Mar 2022, with a remediation deadline of 24 Mar 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

References

www.kb.cert.org/vuls/id/647436 · Patch, Third Party Advisory, US Government Resource
www.us-cert.gov/cas/techalerts/TA04-196A.html · Broken Link, Patch, Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020 · Patch, Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/16590 · Third Party Advisory, VDB Entry
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847 · Broken Link
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-0210 · US Government Resource