Microsoft Windows Privilege Escalation Vulnerability

HIGH 7.8EXPLOITED (CISA KEV)CVE-2004-0210 · Published 06/08/2004 · updated 16/06/2026

Microsoft Windows Privilege Escalation Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/03/2022. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
interix microsoft	`= 2.2`	No fix yet

Description

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

References

kb.cert.org/vuls/id/647436 · Patch
us-cert.gov/cas/techalerts/TA04-196A.html · Broken Link
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-020 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/16590 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2166 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2847 · Broken Link
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2004-0210

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free