PT-2004-1372 · Microsoft · Windows 2000+5

Published 2004-10-16 · Updated 2018-10-12 · CVE-2004-0207

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the patchday that contains the fix for this issue

Description A local privilege escalation issue exists in the Window Management application programming interface (API) for Microsoft Windows, allowing local users to gain privileges by using certain API functions to change properties of privileged programs. The SetWindowLong and SetWindowLongPtr API functions are specifically used to exploit this issue.

Recommendations For Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, apply the patch from the patchday that contains the fix for this issue to resolve the problem.

Fix

Related Identifiers

CVE-2004-0207

Affected Products

Windows

Windows 2000

Windows 98

Windows Nt 4.0

Windows Server 2003

Windows Xp

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2004-0207 · Security Note
• http://kb.cert.org/vuls/id/218526 · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=109777417922695&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17658 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16579 · Note