PT-2004-1308 · Microsoft · Windows 2000+3

Published 2004-04-16 · Updated 2018-10-12 · CVE-2004-0117

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 98, Windows 2000, Windows XP, and Windows Server 2003 (affected versions not specified)

Description The issue is related to an unknown vulnerability in the H.323 protocol implementation, allowing remote attackers to execute arbitrary code. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0117

Affected Products

Windows 2000

Windows 98

Windows Server 2003

Windows Xp

References · 9

• http://kb.cert.org/vuls/id/353956 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0117 · Security Note
• http://us-cert.gov/cas/techalerts/TA04-104A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A946 · Note
• http://ciac.org/ciac/bulletins/o-114.shtml · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A907 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A964 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15710 · Note