CVE-2004-0206
highpriority · attend · 66EPSS 0.747 · 99 %ileexploit · functionalEUUSEPSS · scored 2026-10-27
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (3)
Public proof-of-concept and weaponised exploit code.
- EDB-16371Microsoft NetDDE Service - Remote Overflow (MS04-031) (Metasploit)functional · exploit_db
- EDB-734Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)functional · exploit_db
- exploit/windows/smb/ms04_031_netddeMS04-031 Microsoft NetDDE Service Overflowfunctional · metasploit
affected products (6)
Products and version ranges known to be affected.
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (28)
External citations — patches, advisories, analysis.
- http://marc.info/?l=bugtraq&m=109786703930674&w=2enisa_euvd
- http://secunia.com/advisories/12803/enisa_euvd
- http://www.kb.cert.org/vuls/id/640488enisa_euvd
- http://www.securityfocus.com/bid/11372enisa_euvd
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16556enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17657enisa_euvd
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan