PT-2004-3419 · Microsoft · Windows 2003+2

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2527

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP versions prior to SP2 Microsoft Windows 2003

Description The issue allows remote attackers to cause a denial of service by consuming CPU and memory resources. This is achieved by repeatedly using the WinKey+"U" key combination on the local and remote desktop login screens, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed.

Recommendations For Microsoft Windows XP versions prior to SP2, apply Service Pack 2 to resolve the issue. For Microsoft Windows 2003, no specific fix is provided in the available information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-2527

Affected Products

Windows 2003

Windows Utility Manager

Windows Xp

References · 5

• 🔥 http://osvdb.org/8368 · Exploit
• 🔥 http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2527 · Security Note
• http://securitytracker.com/id?1010836 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16851 · Note