Stack-based Buffer Overflow in Windows Task Scheduler and Internet Explorer 6
CVE-2004-0212

Currently unrated

Key Information:

Vendor
Avaya
Vendor
CVE Published:
6 August 2004

Summary

This vulnerability arises from a stack-based buffer overflow in the Task Scheduler component of Windows 2000 and XP, as well as Internet Explorer 6 running on Windows NT 4.0. It allows local or remote attackers to execute arbitrary code by crafting a .job file with excessively long parameters. The exploit can be executed through Internet Explorer when accessing a vulnerable .job file on an anonymous share, posing significant risks to system security.

References

EPSS Score

76% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.