PT-2004-3419 · Microsoft · Windows 2003+2

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2527

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Média

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions prior to SP2 Microsoft Windows 2003

Description The issue allows remote attackers to cause a denial of service by consuming CPU and memory resources. This is achieved by repeatedly using the WinKey+"U" key combination on the local and remote desktop login screens, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed.

Recommendations For Microsoft Windows XP versions prior to SP2, apply Service Pack 2 to resolve the issue. For Microsoft Windows 2003, no specific fix is provided in the available information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-2527

Produtos afetados

Windows 2003

Windows Utility Manager

Windows Xp

Referências · 5

• 🔥 http://osvdb.org/8368 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2527 · Nota de Segurança
• http://securitytracker.com/id?1010836 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16851 · Nota