Skip to main content
← All vulnerabilities
CVE-2004-0206

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003

Published
Last modified
published
Not listed in CISA KEV
2 on Exploit-DB, 1 Metasploit module

Summary

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

Timeline

  1. CVE published
  2. Public exploit on Exploit-DB

    EDB-734, EDB-16371

  3. Record last updated
  4. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 17

exchange.xforce.ibmcloud.com

oval.cisecurity.org

securityfocus.com

kb.cert.org

marc.info

secunia.com

docs.microsoft.com

Exploit-DB

GitHub · rapid7/metasploit-framework