CVE Vulnerabilities

CVE-2004-0893

Published: Jan 10, 2005 | Modified: Apr 30, 2019
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka Windows Kernel Vulnerability.

Affected Software

Name Vendor Start Version End Version
Windows_2000 Microsoft * *
Windows_2003_server Microsoft datacenter_64-bit-sp1_beta_1 (including) datacenter_64-bit-sp1_beta_1 (including)
Windows_2003_server Microsoft enterprise (including) enterprise (including)
Windows_2003_server Microsoft enterprise-sp1_beta_1 (including) enterprise-sp1_beta_1 (including)
Windows_2003_server Microsoft enterprise_64-bit (including) enterprise_64-bit (including)
Windows_2003_server Microsoft enterprise_64-bit-sp1_beta_1 (including) enterprise_64-bit-sp1_beta_1 (including)
Windows_2003_server Microsoft r2 (including) r2 (including)
Windows_2003_server Microsoft r2-sp1_beta_1 (including) r2-sp1_beta_1 (including)
Windows_2003_server Microsoft standard (including) standard (including)
Windows_2003_server Microsoft standard-sp1_beta_1 (including) standard-sp1_beta_1 (including)
Windows_2003_server Microsoft web (including) web (including)
Windows_2003_server Microsoft web-sp1_beta_1 (including) web-sp1_beta_1 (including)
Windows_nt Microsoft 4.0 (including) 4.0 (including)
Windows_nt Microsoft 4.0-sp1 (including) 4.0-sp1 (including)
Windows_nt Microsoft 4.0-sp2 (including) 4.0-sp2 (including)
Windows_nt Microsoft 4.0-sp3 (including) 4.0-sp3 (including)
Windows_nt Microsoft 4.0-sp4 (including) 4.0-sp4 (including)
Windows_nt Microsoft 4.0-sp5 (including) 4.0-sp5 (including)
Windows_nt Microsoft 4.0-sp6 (including) 4.0-sp6 (including)
Windows_nt Microsoft 4.0-sp6a (including) 4.0-sp6a (including)
Windows_xp Microsoft * *

References