HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2004-0210

CVSS 7.8v3.1pub. 2004-08-06upd. 2026-04-16

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Microsoft Interix

    APP
    Microsoft
    2.2

  • Microsoft Windows 2000

    OS
    Microsoft
    wszystkie wersje

  • Microsoft Windows Nt

    OS
    Microsoft
    4.0

CISA KEV — detailsi

Vendori
Microsoft ↗
Producti
Windows
Added to KEVi
March 3, 2022
Remediation deadline (US Federal)i
March 24, 2022(overdue)
Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.

🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
⏰CISA DEADLINE: 24 marca 2022
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2008-4250CRITICAL9.8⚠ KEVten sam produkt

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1,...

CVE-2020-7485CRITICAL9.8ten sam produkt

**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and...

CVE-2009-2494CRITICAL9.8ten sam produkt

The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, ...

CVE-2008-4835CRITICAL9.8ten sam produkt

SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold a...

CVE-2008-3465CRITICAL9.8ten sam produkt

Heap-based buffer overflow in an API in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and...