Summary
generated automatically from NVD dataThe Network Dynamic Data Exchange (NetDDE) services in Microsoft Windows 98, NT 4.0, 2000, XP and Server 2003 contain a flaw tied to an "unchecked buffer," possibly a buffer overflow. A remote attacker could send a malicious message to execute arbitrary code, while a local attacker could use a malicious application to gain elevated privileges. The CVSS v2.0 score is 7.5 (HIGH), with a network attack vector, low complexity and no authentication required.
NVD description
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
EPSS · FIRST.org
74.7%probability of exploitation in the next 30 days
Higher than 99% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-29, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 3 nov. 2004
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (28)
- http://www.kb.cert.org/vuls/id/640488PatchThird Party AdvisoryUS Government Resource
- + 13 more references on NVD
Similar CVEs
Other vulnerabilities of type
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.