CVEvulnerability

CVE-2004-0893

7.2 HIGH Published 2005-01-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-01-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."

Affected configurations

• microsoft windows 2000 • microsoft windows 2003 server datacenter 64-bit • microsoft windows 2003 server enterprise • microsoft windows 2003 server enterprise 64-bit • microsoft windows 2003 server r2 • microsoft windows 2003 server standard • microsoft windows 2003 server web • microsoft windows nt 4.0 • microsoft windows xp

References