CVE Feed

    Dashboard / CVE / CVE-2004-0214

    CVE-2004-0214

    Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.

    Published:Oct 16, 2004
    Last Modified:Apr 16, 2026
    EPS:Oct 16, 2004
    EPSS Score:0.78254
    CVSS Score:10

    Affected Products

    Vendor
    Microsoft
    Product
    Internet Explorer
    Vendor
    Microsoft
    Product
    Windows 2000
    Vendor
    Microsoft
    Product
    Windows 98
    Vendor
    Microsoft
    Product
    Windows Me
    Vendor
    Microsoft
    Product
    Windows Xp

    Exploits

    https://www.exploit-db.com/exploits/24051

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-59295 (CVSS 8.8) — Heap-based buffer overflow in Internet Explorer allows an unauthorized attacker to execute code over a network…
    CVE-2021-35240 (CVSS 6.5) — A security researcher stored XSS via a Help Server setting. This affects customers using Internet Explorer, be…
    CVE-2021-26419 (CVSS 7.5) — Scripting Engine Memory Corruption Vulnerability…
    CVE-2021-27085 (CVSS 8.8) — Internet Explorer Remote Code Execution Vulnerability…
    CVE-2021-26411 (CVSS 8.8) — Internet Explorer Memory Corruption Vulnerability…
    CVE-2020-17058 (CVSS 7.5) — Microsoft Browser Memory Corruption Vulnerability…
    CVE-2020-17053 (CVSS 7.5) — Internet Explorer Memory Corruption Vulnerability…
    CVE-2020-17052 (CVSS 7.5) — Scripting Engine Memory Corruption Vulnerability…
    CVE-2020-1506 (CVSS 6.1) — <p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. A…
    CVE-2020-1012 (CVSS 8.8) — <p>An elevation of privilege vulnerability exists in the way that the Wininit.dll handles objects in memory. A…

    References

    http://seclists.org/lists/bugtraq/2004/Apr/0322.html
    http://seclists.org/lists/fulldisclosure/2004/Apr/0933.html
    http://secunia.com/advisories/11482/
    http://securitytracker.com/id?1011647
    http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857
    http://www.kb.cert.org/vuls/id/616200
    http://www.osvdb.org/5687
    http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html
    http://www.securityfocus.com/bid/10213
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037
    https://exchange.xforce.ibmcloud.com/vulnerabilities/15956
    https://exchange.xforce.ibmcloud.com/vulnerabilities/17662
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307
    http://seclists.org/lists/bugtraq/2004/Apr/0322.html
    http://seclists.org/lists/fulldisclosure/2004/Apr/0933.html
    http://secunia.com/advisories/11482/
    http://securitytracker.com/id?1011647
    http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B322857
    http://www.kb.cert.org/vuls/id/616200
    http://www.osvdb.org/5687
    http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html
    http://www.securityfocus.com/bid/10213
    https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-037
    https://exchange.xforce.ibmcloud.com/vulnerabilities/15956
    https://exchange.xforce.ibmcloud.com/vulnerabilities/17662
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1601
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1749
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2638
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4345
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5307

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High