[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249966

 
 

909

 
 

195636

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2004-0212Date: (C)2004-08-06   (M)2023-12-22


Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECUNIA-12060
http://marc.info/?l=bugtraq&m=108981273009250&w=2
http://marc.info/?l=bugtraq&m=108981403025596&w=2
MS04-022
TA04-196A
VU#228028
http://www.ngssoftware.com/advisories/mstaskjob.txt
oval:org.mitre.oval:def:1344
oval:org.mitre.oval:def:1781
oval:org.mitre.oval:def:1964
oval:org.mitre.oval:def:3428
win-taskscheduler-bo(16591)

CPE    11
cpe:/o:microsoft:windows_2000::sp3
cpe:/o:microsoft:windows_2000::sp4
cpe:/a:avaya:ip600_media_servers
cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation
...
OVAL    4
oval:org.mitre.oval:def:1781
oval:org.mitre.oval:def:1344
oval:org.mitre.oval:def:3428
oval:org.mitre.oval:def:1964
...

© SecPod Technologies