CVE-2004-0210

high Microsoft ⚠️ CISA KEV — Exploited in the Wild
CVSS v3 Base Score
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
5.1%
Exploitation probability in 30 days
Top 10% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Confidentiality
High
Integrity
High
Availability
High
Published: August 6, 2004 (7951 days ago)
Last Modified: April 16, 2026
Vendor: Microsoft
Source: NVD

⚠️ CISA Known Exploited Vulnerability

Added to KEV: 2022-03-03
Remediation Due: 2022-03-24 (⚠ 1512d overdue)

Description

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

CWE

CWE-120

Affected Products

microsoft interixmicrosoft windows 2000microsoft windows nt

References

🔗 www.kb.cert.org 🔗 www.us-cert.gov 🔗 docs.microsoft.com 🔗 exchange.xforce.ibmcloud.com 🔗 oval.cisecurity.org