CVE-2004-0212
highpriority · attend · 72EPSS 0.635 · 99 %ileexploit · functionalEUUSEPSS · scored 2026-10-27
Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (2)
Public proof-of-concept and weaponised exploit code.
- EDB-353Microsoft Windows Task Scheduler (XP/2000) - '.job' (MS04-022)functional · exploit_db
- EDB-368Microsoft Windows XP - Task Scheduler '.job' Universal (MS04-022)functional · exploit_db
affected products (9)
Products and version ranges known to be affected.
- avaya definity one media serverall versionsnvdUScpe:2.3:h:avaya:definity_one_media_server:*:*:*:*:*:*:*:*
- avaya modular messaging message storage server= s3400nvdUScpe:2.3:o:avaya:modular_messaging_message_storage_server:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (24)
External citations — patches, advisories, analysis.
- http://marc.info/?l=bugtraq&m=108981273009250&w=2enisa_euvd
- http://marc.info/?l=bugtraq&m=108981403025596&w=2enisa_euvd
- http://secunia.com/advisories/12060enisa_euvd
- http://www.kb.cert.org/vuls/id/228028enisa_euvd
- http://www.ngssoftware.com/advisories/mstaskjob.txtenisa_euvd
- http://www.us-cert.gov/cas/techalerts/TA04-196A.htmlenisa_euvd
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-022enisa_euvd
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16591enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan