CVE-2004-2339
First published: Fri Dec 31 2004(Updated: )
** DISPUTED ** Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows 2000 | ||
| Microsoft Windows Server 2003 | =r2 | |
| Microsoft Windows XP | =gold |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-2339?
CVE-2004-2339 is considered a critical vulnerability due to its potential for local users to execute arbitrary code with kernel privileges.
How do I fix CVE-2004-2339?
To fix CVE-2004-2339, it is recommended to apply the latest security patches provided by Microsoft for the affected Windows versions.
Which systems are affected by CVE-2004-2339?
CVE-2004-2339 affects Microsoft Windows 2000, Windows XP, and potentially Windows 2003 Server R2.
What is the nature of the vulnerability in CVE-2004-2339?
The vulnerability in CVE-2004-2339 allows local users with SeDebugPrivilege to execute arbitrary code and manipulate kernel memory through improper pointer validation.
Is CVE-2004-2339 disputed?
Yes, CVE-2004-2339 is noted as disputed, meaning there are differing opinions on the severity and exploitability of the vulnerability.
- agent/type
- agent/first-publish-date
- agent/references
- agent/weakness
- agent/status
- agent/softwarecombine
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-index
- agent/author
- vendor/microsoft
- canonical/microsoft windows 2000
- canonical/microsoft windows server 2003
- version/microsoft windows server 2003/r2
- canonical/microsoft windows xp
- version/microsoft windows xp/gold
- status/disputed