What is the severity of CVE-2004-2527?

CVE-2004-2527 is considered a moderate severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2004-2527?

To address CVE-2004-2527, upgrade to Microsoft Windows XP Service Pack 2 or later.

Which versions of Windows are affected by CVE-2004-2527?

CVE-2004-2527 affects Microsoft Windows XP prior to Service Pack 2 and Windows 2003 Server.

Can CVE-2004-2527 be exploited remotely?

Yes, CVE-2004-2527 can be exploited remotely by attackers using the WinKey+"U" key combination.

What type of attack does CVE-2004-2527 facilitate?

CVE-2004-2527 facilitates a denial of service attack by causing high CPU and memory consumption.

Vulnerability/
CVE-2004-2527

medium

5.4

CWE

NVD-CWE-Other

31/12/2004

25/10/2005

8/8/2024

CVE-2004-2527

First published: Fri Dec 31 2004(Updated: )

The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Microsoft Windows XP	=sp1
Microsoft Windows Server 2003	=r2
Microsoft Windows XP	=gold
Microsoft Windows Server 2003	=r2
Microsoft Windows XP	=gold
Microsoft Windows XP	=sp1

Remedy

http://www.osvdb.org/8368

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2004-2527?
CVE-2004-2527 is considered a moderate severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2004-2527?
To address CVE-2004-2527, upgrade to Microsoft Windows XP Service Pack 2 or later.
Which versions of Windows are affected by CVE-2004-2527?
CVE-2004-2527 affects Microsoft Windows XP prior to Service Pack 2 and Windows 2003 Server.
Can CVE-2004-2527 be exploited remotely?
Yes, CVE-2004-2527 can be exploited remotely by attackers using the WinKey+"U" key combination.
What type of attack does CVE-2004-2527 facilitate?
CVE-2004-2527 facilitates a denial of service attack by causing high CPU and memory consumption.

agent/references
agent/type
agent/softwarecombine
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/author
agent/remedy
agent/severity
agent/weakness
agent/last-modified-date
agent/event
agent/description
agent/source
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/microsoft
canonical/microsoft windows xp
version/microsoft windows xp/sp1
canonical/microsoft windows server 2003
version/microsoft windows server 2003/r2
version/microsoft windows xp/gold

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.