Lucene search

K
cve[email protected]CVE-2004-2339
HistoryAug 16, 2005 - 4:00 a.m.

CVE-2004-2339

2005-08-1604:00:00
web.nvd.nist.gov
24
microsoft
windows
cve-2004-2339
local privilege escalation
nvd
sedebugprivilege
kernel
memory
code execution

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed

Affected configurations

NVD
Node
microsoftwindows_2000
OR
microsoftwindows_2003_serverMatchr2
OR
microsoftwindows_xpgold

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.1%

Related for CVE-2004-2339