Unscored CVE-2004-0893 EUVD-2004-0891GHSA-rm55-79mv-22rp

The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does n…

Published Dec 15, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."

References

oval:org.mitre.oval:def:1561 vdb-entry signature
oval:org.mitre.oval:def:4021 vdb-entry signature
oval:org.mitre.oval:def:1581 vdb-entry signature
oval:org.mitre.oval:def:1886 vdb-entry signature
oval:org.mitre.oval:def:450 vdb-entry signature
MS04-044 vendor-advisory
win-kernel-lpc-gain-privileges(18339) vdb-entry
oval:org.mitre.oval:def:1321 vdb-entry signature
oval:org.mitre.oval:def:2008 vdb-entry signature
oval:org.mitre.oval:def:4458 vdb-entry signature