CVE-2004-0214

CRITICO 10.0CVE-2004-0214 · Published 03/11/2004 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6.0.2900`	No fix yet

Description

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.

References

seclists.org/lists/bugtraq/2004/Apr/0322.html · Vendor Advisory
seclists.org/lists/fulldisclosure/2004/Apr/0933.html · Vendor Advisory
secunia.com/advisories/11482
securitytracker.com/id
support.microsoft.com/default.aspx
kb.cert.org/vuls/id/616200 · US Government Resource
osvdb.org/5687
securiteam.com/windowsntfocus/5JP0M1PCKI.html
securityfocus.com/bid/10213
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037
exchange.xforce.ibmcloud.com/vulnerabilities/15956
exchange.xforce.ibmcloud.com/vulnerabilities/17662
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free