$ cve CVE-2004-0212 JSON

CVE-2004-0212 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 63.5% (pctl 99)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	63.5% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-08-06
Last modified	2026-06-16

Affected (8)

Vendor	Product
avaya	definity one media server
avaya	ip600 media servers
avaya	modular messaging message storage server
avaya	s8100
microsoft	ie
microsoft	windows 2000
microsoft	windows nt
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows XP - Task Scheduler '.job' Universal (MS04-022)	2004-07-31
exploit-db	Microsoft Windows Task Scheduler (XP/2000) - '.job' (MS04-022)	2004-07-18

References

→ the Explorer · watch your stack · NVD