CVE-2004-0206

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

74.66% chance of exploitation in the next 30 days, 99th percentile

Published

2004-10-16

Updated

2024-08-08

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms04_031_netdde.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16371
• https://www.exploit-db.com/exploits/734

References

• CVE Record
• NVD entry

Related

• CVE-2004-0204
• CVE-2004-0209
• CVE-2004-0200
• CVE-2004-0210
• CVE-2004-0194
• CVE-2004-0212