7.2

CVE-2004-0893

The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 2000 Update sp1
Microsoft ≫ Windows 2000 Update sp2
Microsoft ≫ Windows 2000 Update sp3
Microsoft ≫ Windows 2000 Update sp4
Microsoft ≫ Windows 2003 Server Version datacenter_64-bit Update sp1_beta_1
Microsoft ≫ Windows 2003 Server Version enterprise Edition 64-bit
Microsoft ≫ Windows 2003 Server Version enterprise Update sp1_beta_1
Microsoft ≫ Windows 2003 Server Version enterprise_64-bit
Microsoft ≫ Windows 2003 Server Version enterprise_64-bit Update sp1_beta_1
Microsoft ≫ Windows 2003 Server Version r2 Edition 64-bit
Microsoft ≫ Windows 2003 Server Version r2 Edition datacenter_64-bit
Microsoft ≫ Windows 2003 Server Version r2 Update sp1_beta_1
Microsoft ≫ Windows 2003 Server Version standard Edition 64-bit
Microsoft ≫ Windows 2003 Server Version standard Update sp1_beta_1
Microsoft ≫ Windows 2003 Server Version web
Microsoft ≫ Windows 2003 Server Version web Update sp1_beta_1
Microsoft ≫ Windows Nt Version 4.0 Edition enterprise_server
Microsoft ≫ Windows Nt Version 4.0 Edition server
Microsoft ≫ Windows Nt Version 4.0 Edition terminal_server
Microsoft ≫ Windows Nt Version 4.0 Edition workstation
Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition enterprise_server
Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition server
Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition terminal_server
Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition workstation
Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition enterprise_server
Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition server
Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition terminal_server
Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition workstation
Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition enterprise_server
Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition server
Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition terminal_server
Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition workstation
Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition enterprise_server
Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition server
Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition terminal_server
Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition workstation
Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition enterprise_server
Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition server
Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition terminal_server
Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition workstation
Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition enterprise_server
Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition server
Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition terminal_server
Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition workstation
Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition enterprise_server
Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition server
Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition workstation
Microsoft ≫ Windows Xp Edition 64-bit
Microsoft ≫ Windows Xp Edition home
Microsoft ≫ Windows Xp Edition media_center
Microsoft ≫ Windows Xp Update gold Edition professional
Microsoft ≫ Windows Xp Update sp1 Edition 64-bit
Microsoft ≫ Windows Xp Update sp1 Edition home
Microsoft ≫ Windows Xp Update sp1 Edition media_center
Microsoft ≫ Windows Xp Update sp2 Edition home
Microsoft ≫ Windows Xp Update sp2 Edition media_center
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.53% 0.721
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044
https://exchange.xforce.ibmcloud.com/vulnerabilities/18339
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1561
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1581
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1886
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2008
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4021
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4458
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A450