$ cve CVE-2004-1080 JSON

CVE-2004-1080 EXPLOIT

10.0

HIGH · CVSS 2.0 · EPSS 79.8% (pctl 100)

Patch early

A public exploit exists.

Description

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."

Scoring

CVSS	10.0 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS	79.8% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-01-10
Last modified	2026-06-16

Affected (3)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows nt

Public exploits

Source	Title	Date
exploit-db	Microsoft WINS - Service Memory Overwrite (MS04-045) (Metasploit)	2010-09-20
exploit-db	Microsoft Windows - 'WINS' Remote Buffer Overflow (MS04-045) (3)	2005-04-12

References

→ the Explorer · watch your stack · NVD