CVE-2004-0212

Microsoft Windows Task Scheduler (XP/2000) - '.job' (MS04-022)

Severity Score

10.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.

Vulnerabilidad basada en la pila en el Programador de Tareas de Windows 2000 y XP, e Internet Explorer 6 en Windows NT 4.0 permite a atacantes remotos o locales ejecutar código de su elección mediante un fichero .job conteniendo parámetros grandes, como se ha demostrado utlizando Internet Explorer y accediendo a un fichero .job en una carpeta de red compartida anónimamente.

*Credits: N/A

CVSS Scores

NISTv2 10.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2004-03-11 CVE Reserved
2004-07-14 CVE Published
2004-07-18 First Exploit
2023-06-21 EPSS Updated
2024-08-08 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (14)

URL	Tag	Source
http://marc.info/?l=bugtraq&m=108981273009250&w=2	Mailing List
http://marc.info/?l=bugtraq&m=108981403025596&w=2	Mailing List
http://secunia.com/advisories/12060	Third Party Advisory
http://www.kb.cert.org/vuls/id/228028	Third Party Advisory
http://www.ngssoftware.com/advisories/mstaskjob.txt	X_refsource_misc
https://exchange.xforce.ibmcloud.com/vulnerabilities/16591	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1344	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1781	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1964	Signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3428	Signature

URL	Date	SRC
https://www.exploit-db.com/exploits/353	2004-07-18
https://www.exploit-db.com/exploits/368	2004-07-31

URL	Date	SRC
http://www.us-cert.gov/cas/techalerts/TA04-196A.html	2019-04-30

URL	Date	SRC
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-022	2019-04-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Avaya Search vendor "Avaya"		Ip600 Media Servers Search vendor "Avaya" for product "Ip600 Media Servers"				*		-		Affected
Microsoft Search vendor "Microsoft"		Ie Search vendor "Microsoft" for product "Ie"				6.0 Search vendor "Microsoft" for product "Ie" and version "6.0"		sp1		Affected
Avaya Search vendor "Avaya"		Definity One Media Server Search vendor "Avaya" for product "Definity One Media Server"				*		-		Affected
Avaya Search vendor "Avaya"		S8100 Search vendor "Avaya" for product "S8100"				*		-		Affected
Avaya Search vendor "Avaya"		Modular Messaging Message Storage Server Search vendor "Avaya" for product "Modular Messaging Message Storage Server"				s3400 Search vendor "Avaya" for product "Modular Messaging Message Storage Server" and version "s3400"		-		Affected
Microsoft Search vendor "Microsoft"		Windows 2000 Search vendor "Microsoft" for product "Windows 2000"				*		-		Affected
Microsoft Search vendor "Microsoft"		Windows 2000 Search vendor "Microsoft" for product "Windows 2000"				*		sp1		Affected
Microsoft Search vendor "Microsoft"		Windows 2000 Search vendor "Microsoft" for product "Windows 2000"				*		sp2		Affected
Microsoft Search vendor "Microsoft"		Windows 2000 Search vendor "Microsoft" for product "Windows 2000"				*		sp3		Affected
Microsoft Search vendor "Microsoft"		Windows 2000 Search vendor "Microsoft" for product "Windows 2000"				*		sp4		Affected
Microsoft Search vendor "Microsoft"		Windows Nt Search vendor "Microsoft" for product "Windows Nt"				4.0 Search vendor "Microsoft" for product "Windows Nt" and version "4.0"		sp6a, enterprise_server		Affected
Microsoft Search vendor "Microsoft"		Windows Nt Search vendor "Microsoft" for product "Windows Nt"				4.0 Search vendor "Microsoft" for product "Windows Nt" and version "4.0"		sp6a, server		Affected
Microsoft Search vendor "Microsoft"		Windows Nt Search vendor "Microsoft" for product "Windows Nt"				4.0 Search vendor "Microsoft" for product "Windows Nt" and version "4.0"		sp6a, workstation		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		64-bit		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		home		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		gold, professional		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp1, 64-bit		Affected
Microsoft Search vendor "Microsoft"		Windows Xp Search vendor "Microsoft" for product "Windows Xp"				*		sp1, home		Affected