CVE

Id
8641  
CVE No.
CVE-2004-0213  
Status
Candidate  
Description
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.  
Phase
Assigned (20040311)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
54186 8641 CVE-2004-0213 BUGTRAQ:20040713 Microsoft Window Utility Manager Local Elevation of Privileges  View
54187 8641 CVE-2004-0213 URL:http://marc.info/?l=bugtraq&m=108975382413405&w=2  View
54188 8641 CVE-2004-0213 MS:MS04-019  View
54189 8641 CVE-2004-0213 URL:http://www.microsoft.com/technet/security/bulletin/ms04-019.asp  View
54190 8641 CVE-2004-0213 CERT:TA04-196A  View
54191 8641 CVE-2004-0213 URL:http://www.us-cert.gov/cas/techalerts/TA04-196A.html  View
54192 8641 CVE-2004-0213 CERT-VN:VU#868580  View
54193 8641 CVE-2004-0213 URL:http://www.kb.cert.org/vuls/id/868580  View
54194 8641 CVE-2004-0213 XF:win-utilitymanager-gain-privileges(16592)  View
54195 8641 CVE-2004-0213 URL:http://xforce.iss.net/xforce/xfdb/16592  View
54196 8641 CVE-2004-0213 OVAL:oval:org.mitre.oval:def:2495  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63087 JVNDB-2004-000429 Microsoft Windows の Windows シェルにおける任意のコードを実行される脆弱性 Microsoft Windows に含まれている Windows シェルには、アプリケーションの起動処理において、メッセージの長さを適切にチェックしていない脆弱性が存在します。 CVE-2004-0214 8641 10 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000429.html  View