PT-2004-1372 · Microsoft · Windows 2000+5

Publicado 2004-10-16 · Atualizado 2018-10-12 · CVE-2004-0207

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the patchday that contains the fix for this issue

Description A local privilege escalation issue exists in the Window Management application programming interface (API) for Microsoft Windows, allowing local users to gain privileges by using certain API functions to change properties of privileged programs. The SetWindowLong and SetWindowLongPtr API functions are specifically used to exploit this issue.

Recommendations For Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, apply the patch from the patchday that contains the fix for this issue to resolve the problem.

Correção

Identificadores relacionados

CVE-2004-0207

Produtos afetados

Windows

Windows 2000

Windows 98

Windows Nt 4.0

Windows Server 2003

Windows Xp

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0207 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=109777417922695&w=2 · Nota
• http://kb.cert.org/vuls/id/218526 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17658 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16579 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032 · Aviso do Fabricante