CVEvulnerability
CVE-2004-2527
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.4 MEDIUM — AV:N/AC:H/Au:N/C:N/I:N/A:C
Description
The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.
Related
Referenced by CWE · observed example (1)
- CWE-407 Inefficient Algorithmic Complexity weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html Exploit, Vendor Advisory
- http://securitytracker.com/id?1010836 securitytracker.com
- http://www.osvdb.org/8368 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16851 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html Exploit, Vendor Advisory
- http://securitytracker.com/id?1010836 securitytracker.com
- http://www.osvdb.org/8368 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16851 exchange.xforce.ibmcloud.com