PT-2002-2204 · Microsoft · Windows 2000+3

Published 2002-11-04 · Updated 2019-04-30 · CVE-2002-1230

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Windows NT 4.0 Windows 4.0 Terminal Server Edition Windows 2000 Windows XP

Description: The issue allows local users to execute arbitrary code as LocalSystem via a "shatter" style attack. This is achieved by sending a WM COPYDATA message followed by a WM TIMER message.

Recommendations: For Windows NT 4.0, apply the necessary patch to fix the flaw in Windows WM TIMER message handling. For Windows 4.0 Terminal Server Edition, apply the necessary patch to fix the flaw in Windows WM TIMER message handling. For Windows 2000, apply the necessary patch to fix the flaw in Windows WM TIMER message handling. For Windows XP, apply the necessary patch to fix the flaw in Windows WM TIMER message handling.

Exploit

Fix

Related Identifiers

CVE-2002-1230

Affected Products

Windows 2000

Windows Nt 4.0 Terminal Server Edition

Windows Nt 4.0

Windows Xp

References · 18

• 🔥 https://exploit-db.com/exploits/21685 · Exploit
• 🔥 https://exploit-db.com/exploits/21689 · Exploit
• 🔥 https://exploit-db.com/exploits/21922 · Exploit
• 🔥 https://exploit-db.com/exploits/21691 · Exploit
• 🔥 https://exploit-db.com/exploits/21923 · Exploit
• 🔥 https://exploit-db.com/exploits/21688 · Exploit
• 🔥 https://exploit-db.com/exploits/21686 · Exploit
• 🔥 https://exploit-db.com/exploits/21690 · Exploit
• 🔥 https://exploit-db.com/exploits/21687 · Exploit
• 🔥 https://exploit-db.com/exploits/21684 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-071 · Vendor Advisory
• http://packetstormsecurity.nl/filedesc/GetAd.c.html · Vendor Advisory
• http://iss.net/security_center/static/10343.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1230 · Security Note
• http://securityfocus.com/bid/5927 · Note