vulnwire
7.5high

CVE-2004-0206in critical feed3 exploits

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
74.7%
percentile 100%
Public exploits
3
Metasploit · Exploit-DB

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

Exploit prediction (EPSS)

74.66% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/windows/smb/ms04_031_netdde MS04-031 Microsoft NetDDE Service Overflow · metasploit exploit, good rank · 2004-10-12
  • EDB-734 Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031) · remote · 2004-12-31
  • EDB-16371 Microsoft NetDDE Service - Remote Overflow (MS04-031) (Metasploit) · remote · 2010-07-03

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • exchange.xforce.ibmcloud.com /vulnerabilities/17657 · vdb-entry, x_refsource_XF, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • securityfocus.com /bid/11372 · vdb-entry, x_refsource_BID, x_transferred
  • kb.cert.org /vuls/id/640488 · third-party-advisory, x_refsource_CERT-VN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • marc.info /?l=bugtraq&m=109786703930674&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • secunia.com /advisories/12803/ · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2004/ms04-031 · vendor-advisory, x_refsource_MS, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/16556 · vdb-entry, x_refsource_XF, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242 · vdb-entry, signature, x_refsource_OVAL, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.