CVE-2004-2339: High severity Microsoft Windows 2000 vulnerability
DISPUTED Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-2339?
CVE-2004-2339 is considered a critical vulnerability due to its potential for local users to execute arbitrary code with kernel privileges.
How do I fix CVE-2004-2339?
To fix CVE-2004-2339, it is recommended to apply the latest security patches provided by Microsoft for the affected Windows versions.
Which systems are affected by CVE-2004-2339?
CVE-2004-2339 affects Microsoft Windows 2000, Windows XP, and potentially Windows 2003 Server R2.
What is the nature of the vulnerability in CVE-2004-2339?
The vulnerability in CVE-2004-2339 allows local users with SeDebugPrivilege to execute arbitrary code and manipulate kernel memory through improper pointer validation.
Is CVE-2004-2339 disputed?
Yes, CVE-2004-2339 is noted as disputed, meaning there are differing opinions on the severity and exploitability of the vulnerability.