Findings

CVE-2004-0210

Microsoft Windows Privilege Escalation Vulnerability

Published Aug 5, 2004 · updated Jun 16, 2026 · microsoft interix

The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 5, 2004 · Catalog

    Detected

    The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

  2. Mar 3, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Mar 24, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

Required action

Apply updates per vendor instructions.

CISA due date Mar 24, 2022

Affected

  • cpe microsoft/interix2.2
  • cpe microsoft/windows 2000version unspecified
  • cpe microsoft/windows nt4.0
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2004-0210

    A privilege elevation vulnerability exists in the POSIX subsystem. This vulnerability could allow a logged on user to take complete control of the system.

    cisa.gov
  • CVE.orgCVE-2004-0210

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2004-0210

    30-day exploitation probability 7.2%

    first.org
  • Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2004-0210

    The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

    nvd.nist.gov

References

CVE-2004-0210 · ZeroDay Findings