high7.5Public exploit code

CVE-2004-0206

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Microsoft NetDDE Service - Remote Overflow (MS04-031) (Metasploit)2010-07-03 · remote · windows · Verified
Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)2004-12-31 · remote · windows · Verified

Impact

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

Affected products

Vendor	Product	Affected versions
Microsoft	Windows 2000	All versions
Microsoft	Windows 2003 Server	Version r2
Microsoft	Windows 98	All versions
Microsoft	Windows Nt	Version 4.0
Microsoft	Windows Xp	All versions

Public exploit code

Impact

Affected products

References