$ cve CVE-2004-0206 JSON

CVE-2004-0206 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 74.7% (pctl 99)

Patch early

A public exploit exists.

Description

Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	74.66% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-11-03
Last modified	2026-06-16

Affected (5)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows 98
microsoft	windows nt
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft NetDDE Service - Remote Overflow (MS04-031) (Metasploit)	2010-07-03
exploit-db	Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)	2004-12-31

References

→ the Explorer · watch your stack · NVD