Lucene search
HistoryFeb 20, 2005 - 5:00 a.m.
CVE-2004-1649
cve-2004-1649
buffer overflow
msinfo32.exe
microsoft
arbitrary code execution
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.0%
Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command line parameter. NOTE: this issue might not cross security boundaries, so it may be REJECTED in the future.
Affected configurations
Node
microsoftwindows_2000
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_2000 | microsoft windows 2000 | eq | * |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
23.0%
Related for CVE-2004-1649