PT-2004-3233 · Microsoft · Windows

Published 2004-12-31 · Updated 2025-01-16 · CVE-2004-2339

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions 2000, XP, and possibly 2003

Description: The issue allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note that this issue has been disputed since Administrator privileges are typically required to exploit it, thus privilege boundaries are not crossed.

Recommendations: For Microsoft Windows 2000, XP, and possibly 2003, consider restricting the use of the SeDebugPrivilege privilege to minimize the risk of exploitation. As a temporary workaround, consider disabling the NtSystemDebugControl function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-2339

Affected Products

Windows

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2004-2339 · Security Note
• http://securityfocus.com/archive/1/354392 · Vendor Advisory
• http://securitytracker.com/id?1009128 · Note
• https://t.me/cvenotify/89855 · Telegram Post
• https://t.me/cvenotify/107690 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15263 · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-02/0530.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2004-02/0529.html · Note