Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2004-0206

Description

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

POC

Reference

- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/nitishbadole/oscp-note-2

- https://github.com/rmsbpro/rmsbpro