Lucene search

K
cveMitreCVE-2004-0575
HistoryNov 03, 2004 - 5:00 a.m.

CVE-2004-0575

2004-11-0305:00:00
mitre
web.nvd.nist.gov
82
cve-2004-0575
dunzip32.dll
microsoft windows
xp
64-bit
server 2003
remote code execution
buffer overflow
nvd

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.847

Percentile

98.5%

Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an “unchecked buffer” and improper length validation.

Affected configurations

Nvd
Node
microsoftwindows_2003_serverMatch64-bit
OR
microsoftwindows_2003_serverMatchr2
OR
microsoftwindows_xp64-bit
OR
microsoftwindows_xpgold
VendorProductVersionCPE
microsoftwindows_2003_server64-bitcpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*
microsoftwindows_2003_serverr2cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.847

Percentile

98.5%