CVE-2004-0202

Published: Aug 6, 2004Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Affected (28)

Products: Microsoft: Directx, Windows 2000, Windows 2003 Server, Windows 98, Windows 98se, Windows Me, Windows Xp

7 products

Windows 2003 Server

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Microsoft Directx	Version 7.0
Microsoft Directx	Version 7.0a
Microsoft Directx	Version 7.1
Microsoft Directx	Version 8.0
Microsoft Directx	Version 8.0a
Microsoft Directx	Version 8.1
Microsoft Directx	Version 8.1a
Microsoft Directx	Version 8.1b
Microsoft Directx	Version 8.2
Microsoft Directx	Version 9.0a
Microsoft Directx	Version 9.0b

Configuration B

17 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	Version enterprise
Microsoft Windows 2003 Server	Version enterprise_64-bit
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version standard
Microsoft Windows 2003 Server	Version web
Microsoft Windows 98	All versions
Microsoft Windows 98se	All versions
Microsoft Windows Me	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

References (20)

http://secunia.com/advisories/11802

Source: cve@mitre.org

http://www.osvdb.org/6742

Source: cve@mitre.org

http://www.securityfocus.com/bid/10487

Source: cve@mitre.org

PatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-016

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/16306

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1027

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2190

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2413

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2516

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2705

Source: cve@mitre.org

http://secunia.com/advisories/11802

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/6742

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/10487

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-016

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/16306

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1027

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2190

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2413

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2516

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2705

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.