critical10.0Public exploit code

CVE-2004-0212

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execu…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Microsoft Windows XP - Task Scheduler '.job' Universal (MS04-022)2004-07-31 · local · windows · Verified
Microsoft Windows Task Scheduler (XP/2000) - '.job' (MS04-022)2004-07-18 · local · windows · Verified

Impact

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.

Affected products

Vendor	Product	Affected versions
Avaya	Ip600 Media Servers	All versions
Microsoft	Ie	Version 6.0
Avaya	Definity One Media Server	All versions
Avaya	S8100	All versions
Avaya	Modular Messaging Message Storage Server	Version s3400
Microsoft	Windows 2000	All versions
Microsoft	Windows Nt	Version 4.0
Microsoft	Windows Xp	All versions

Public exploit code

Impact

Affected products

References