Vulnerability Details : CVE-2004-0206

Public exploit exists!
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
Published 2004-11-03 05:00:00
Updated 2018-10-12 21:34:14
Source MITRE
View at NVD,   CVE.org
Vulnerability category: OverflowExecute code

Products affected by CVE-2004-0206

Exploit prediction scoring system (EPSS) score for CVE-2004-0206

EPSS FAQ
59.68%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 98 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2004-0206

  • MS04-031 Microsoft NetDDE Service Overflow
    Disclosure Date: 2004-10-12
    First seen: 2020-04-26
    exploit/windows/smb/ms04_031_netdde
    This module exploits a stack buffer overflow in the NetDDE service, which is the precursor to the DCOM interface. This exploit effects only operating systems released prior to Windows XP SP1 (2000 SP4, XP SP0). Despite Microsoft's claim that this vulnerability can

CVSS scores for CVE-2004-0206

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
7.5
 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P
10.0
6.4
 NIST

References for CVE-2004-0206

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close