CVE-2004-0207

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Nt
Windows 2000
Windows 2003 Server
Windows 98
Vendor
CVE Published:
3 November 2004

Summary

"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16579
vdb-entryx_refsource_XF
http://marc.info/?l=bugtraq&m=109777417922695&w=2
mailing-listx_refsource_BUGTRAQ
http://www.kb.cert.org/vuls/id/218526
third-party-advisoryx_refsource_CERT-VN

EPSS Score

29% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.