← Back

CVE-2004-2339

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
8.4
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.5 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Microsoft Windows 2000, XP, and possibly 2003 allows local users with the SeDebugPrivilege privilege to execute arbitrary code as kernel and read or write kernel memory via the NtSystemDebugControl function, which does not verify its pointer arguments. Note: this issue has been disputed, since Administrator privileges are typically required to exploit this issue, thus privilege boundaries are not crossed

Affected (3)

3 products
Windows 2000
Windows 2003 Server
Windows Xp
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
All versions
Version r2
All versions

References (10)

Timeline

No history available yet.