|
|
CVE Reference: CVE-2004-0213 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2004-0213 |
|
|
Description: Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/16592 OVAL http://oval.mitre.org/oval/definitions/data/oval2495.html MS http://www.microsoft.com/technet/security/bulletin/ms04-019.asp CERT-VN 868580 CERT http://www.us-cert.gov/cas/techalerts/TA04-196A.html BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=108975382413405&w=2 |
|
| Return to the previous page. |
