| Vulnerability Name: | CVE-2004-1649 (CCN-17153) | ||||||||
| Assigned: | 2004-08-30 | ||||||||
| Published: | 2004-08-30 | ||||||||
| Updated: | 2017-07-11 | ||||||||
| Summary: | Buffer overflow in Microsoft Msinfo32.exe might allow local users to execute arbitrary code via a long filename in the msinfo_file command line parameter. Note: this issue might not cross security boundaries, so it may be REJECTED in the future. | ||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: CCN Type: Full-Disclosure Mailing List, Mon Aug 30 2004 - 22:16:33 CDT MSInfo Buffer Overflow Source: CCN Type: Full-Disclosure Mailing List, Mon Aug 30 2004 - 18:45:15 CDT RE: [Full-Disclosure] MSInfo Buffer Overflow Source: MITRE Type: CNA CVE-2004-1649 Source: FULLDISC Type: Exploit, Vendor Advisory 20040830 MSInfo Buffer Overflow Source: BUGTRAQ Type: UNKNOWN 20040831 MSInfo Buffer Overflow Source: FULLDISC Type: UNKNOWN 20040830 MSInfo Buffer Overflow Source: CCN Type: OSVDB ID: 9386 Microsoft Windows 2000 msinfo32.exe msinfo_file Variable Overflow Source: XF Type: UNKNOWN msinfo-msinfofile-bo(17153) Source: XF Type: UNKNOWN msinfo-msinfofile-bo(17153) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||