Microsoft : Security Vulnerabilities Published In 2004

2004 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2004-2730	264			2004-12-31	2017-07-29	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Sysinternals PsTools before 2.05, including (1) PsExec before 1.54, (2) PsGetsid before 1.41, (3) PsInfo before 1.61, (4) PsKill before 1.03, (5) PsList before 1.26, (6) PsLoglist before 2.51, (7) PsPasswd before 1.21, (8) PsService before 2.12, (9) PsSuspend before 1.05, and (10) PsShutdown before 2.32, does not properly disconnect from remote IPC$ and ADMIN$ shares, which allows local users to access the shares with elevated privileges by using the existing share mapping.
2	CVE-2004-2704	79		XSS	2004-12-31	2017-07-29	4.3	None	Remote	Medium	Not required	None	Partial	None
Hastymail 1.0.1 and earlier (stable) and 1.1 and earlier (development) does not send the "attachment" parameter in the Content-Disposition field for attachments, which causes the attachment to be rendered inline by Internet Explorer when the victim clicks the download link, which facilitates cross-site scripting (XSS) and possibly other attacks.
3	CVE-2004-2694	264		Bypass	2004-12-31	2016-10-18	5.8	None	Remote	Medium	Not required	Partial	Partial	None
Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top".
4	CVE-2004-2643		1	Dir. Trav.	2004-12-31	2017-07-20	3.7	None	Local	High	Not required	Partial	Partial	Partial
Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive.
5	CVE-2004-2527			DoS	2004-12-31	2017-07-11	5.4	None	Remote	High	Not required	None	None	Complete
The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.
6	CVE-2004-2482			Exec Code	2004-12-31	2017-07-11	5.0	None	Remote	Low	Not required	None	Partial	None
Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property of the OBJECT tag and might allow remote attackers to execute arbitrary code.
7	CVE-2004-2476			DoS	2004-12-31	2017-07-11	2.6	None	Remote	High	Not required	None	None	Partial
Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (infinite loop and crash) via an IFRAME with "?" as the file source.
8	CVE-2004-2434			DoS	2004-12-31	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (browser crash) via a link with "::{" (colon colon left brace), which triggers a null dereference when the user attempts to save the link using "Save As" and Internet Explorer prepares an error message with an attacker-controlled format string.
9	CVE-2004-2383			Bypass	2004-12-31	2017-07-11	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain focus. NOTE: the discloser claimed that the vendor does not categorize this as a vulnerability, but it can be used in a spoofing scenario; the discloser provides alternate scenarios. Spoofing scenarios are currently included in CVE.
10	CVE-2004-2365			DoS	2004-12-31	2017-07-11	2.1	None	Local	Low	Not required	None	None	Partial
Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories using a non-standard tool such as smbmount.
11	CVE-2004-2339			Exec Code	2004-12-31	2019-04-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
DISPUTED Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.
12	CVE-2004-2307			DoS	2004-12-31	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft Internet Explorer 6.0.2600 on Windows XP allows remote attackers to cause a denial of service (browser crash) via a shell: URI with double backslashes (\\) in an HTML tag such as IFRAME or A.
13	CVE-2004-2291			Exec Code	2004-12-31	2008-09-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Microsoft Windows Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via an embedded script that uses Shell Helper objects and a shortcut (link) to execute the target script.
14	CVE-2004-2290			Exec Code	2004-12-31	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Microsoft Windows XP Explorer allows attackers to execute arbitrary code via a HTML and script in a self-executing folder that references an executable file within the folder, which is automatically executed when a user accesses the folder.
15	CVE-2004-2289			Exec Code	2004-12-31	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.
16	CVE-2004-2219				2004-12-31	2017-07-11	2.6	None	Remote	High	Not required	None	Partial	None
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
17	CVE-2004-2179			DoS	2004-12-31	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
asycpict.dll, as used in Microsoft products such as Front Page 97 and 98, allows remote attackers to cause a denial of service (hang) via a JPEG image with maximum height and width values.
18	CVE-2004-2176			Bypass	2004-12-31	2008-09-05	4.6	None	Local	Low	Not required	Partial	Partial	Partial
The Internet Connection Firewall (ICF) in Microsoft Windows XP SP2 is configured by default to trust sessmgr.exe, which allows local users to use sessmgr.exe to create a local listening port that bypasses the ICF access controls.
19	CVE-2004-2137			+Info	2004-12-31	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed in the To and CC fields, which may allow remote attackers to obtain sensitive information.
20	CVE-2004-2091				2004-02-10	2008-09-05	5.0	None	Remote	Low	Not required	None	Partial	None
Microsoft Baseline Security Analyzer (MBSA) 1.2 does not correctly identify systems that have been patched but remain vulnerable to exploit until the system is rebooted, possibly giving the administrator a false sense of security.
21	CVE-2004-2090				2004-02-07	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.
22	CVE-2004-2011			DoS	2004-12-31	2017-07-11	2.6	None	Remote	High	Not required	None	None	Partial
msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & (ampersand) in a <Ref href> link, which triggers a parsing error, possibly due to missing portions of the URI.
23	CVE-2004-1922			DoS	2004-04-11	2016-10-18	2.6	None	Remote	High	Not required	None	None	Partial
Microsoft Internet Explorer 5.5 and 6.0 allocates memory based on the memory size written in the BMP file instead of the actual BMP file size, which allows remote attackers to cause a denial of service (memory consumption) via a small BMP file with has a large memory size.
24	CVE-2004-1686			Bypass	2004-09-15	2017-07-11	5.0	None	Remote	Low	Not required	None	Partial	None
Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer ActiveX plugin.
25	CVE-2004-1649			Exec Code Overflow	2004-08-31	2017-07-11	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command line parameter. NOTE: this issue might not cross security boundaries, so it may be REJECTED in the future.
26	CVE-2004-1623			DoS	2004-10-22	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
The WAV file property handler in Windows XP SP1 allows remote attackers to cause a denial of service (infinite loop in Explorer) via a WAV file with an invalid file header whose fmt chunk length is set to 0xFFFFFFFF.
27	CVE-2004-1560			DoS Overflow	2004-12-31	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft SQL Server 7.0 allows remote attackers to cause a denial of service (mssqlserver service halt) via a long request to TCP port 1433, possibly triggering a buffer overflow.
28	CVE-2004-1527				2004-12-31	2017-07-11	5.0	None	Remote	Low	Not required	None	Partial	None
Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers to hijack web sessions.
29	CVE-2004-1416			DoS Exec Code	2004-12-31	2016-10-18	5.1	None	Remote	High	Not required	Partial	Partial	Partial
pnxr3260.dll in the RealOne 2.0 build 6.0.11.868 browser plugin, as used in Internet Explorer, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted embed tag.
30	CVE-2004-1376			Dir. Trav.	2004-12-30	2016-10-18	5.0	None	Remote	Low	Not required	None	Partial	None
Directory traversal vulnerability in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote malicious FTP servers to overwrite arbitrary files via .. (dot dot) sequences in filenames returned from a LIST command.
31	CVE-2004-1361			Exec Code Overflow	2004-12-23	2019-04-30	5.0	None	Remote	Low	Not required	None	Partial	None
Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a malformed .hlp file, which leads to a heap-based buffer overflow.
32	CVE-2004-1331			Bypass	2004-11-16	2017-07-11	2.6	None	Remote	High	Not required	None	Partial	None
The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command.
33	CVE-2004-1325				2004-12-18	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
The getItemInfoByAtom function in the ActiveX control for Microsoft Windows Media Player 9.0 returns a 0 if the file does not exist and the size of the file if the file exists, which allows remote attackers to determine the existence of files on the local system.
34	CVE-2004-1324				2004-12-18	2017-07-11	2.6	None	Remote	High	Not required	None	Partial	None
The Microsoft Windows Media Player 9.0 ActiveX control may allow remote attackers to execute arbitrary web script in the Local computer zone via the (1) artist or (2) song fields of a music file, if the file is processed using Internet Explorer.
35	CVE-2004-1319				2004-12-15	2019-04-30	5.0	None	Remote	Low	Not required	None	Partial	None
The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is the window with the given name, then injecting the script from the parent into the child using execScript, as demonstrated by "AbusiveParent" in Internet Explorer 6.0.2900.2180.
36	CVE-2004-1306			Exec Code Overflow	2004-12-31	2019-04-30	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a crafted .hlp file.
37	CVE-2004-1305			DoS	2004-12-23	2019-04-30	5.0	None	Remote	Low	Not required	None	None	Partial
The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via (1) the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or (2) the rate number set to zero, which leads to resource exhaustion and hang.
38	CVE-2004-1244			Exec Code	2004-02-08	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka the "PNG Processing Vulnerability."
39	CVE-2004-1198			DoS	2004-12-31	2017-07-11	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash from memory consumption), as demonstrated using Javascript code that continuously creates nested arrays and then sorts the newly created arrays.
40	CVE-2004-1173			Bypass	2004-12-31	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Internet Explorer 6 allows remote attackers to bypass the popup blocker via the document object model (DOM) methods in the DHTML Dynamic HTML (DHTML) Editing Component (DEC) and Javascript that calls showModalDialog.
41	CVE-2004-1166	94		Exec Code	2004-12-31	2018-10-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
CRLF injection vulnerability in Microsoft Internet Explorer 6.0.2800.1106 and earlier allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded newline ("%0a") before the FTP command, which causes the commands to be inserted into the resulting FTP session, as demonstrated using a PORT command.
42	CVE-2004-1155				2004-12-31	2018-10-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable.
43	CVE-2004-1104				2004-12-31	2018-10-19	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute, and a FORM whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL.
44	CVE-2004-1050			Exec Code Overflow	2004-12-31	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."
45	CVE-2004-1049			Exec Code Overflow	2004-12-31	2018-10-12	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."
46	CVE-2004-1043			Exec Code	2004-12-31	2018-10-12	5.0	None	Remote	Low	Not required	None	Partial	None
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."
47	CVE-2004-0985			Exec Code	2004-12-31	2017-07-11	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.
48	CVE-2004-0979				2004-12-31	2018-10-12	4.6	None	Local	Low	Not required	Partial	Partial	Partial
Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.
49	CVE-2004-0869				2004-09-16	2017-07-11	5.0	None	Remote	Low	Not required	Partial	None	None
Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
50	CVE-2004-0867	264			2004-12-23	2017-07-11	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.

Total number of vulnerabilities : 148 Page : 1 (This Page)2 3