CVE-2004-0574

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 67.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-11-03 · updated 2026-06-16
Weakness: CWE-787

Description

The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.

Affected products

Microsoft Exchange Server: 2000, 2003
Microsoft Windows 2000: all versions
Microsoft Windows Nt: 4.0
Microsoft Windows Server 2003: r2

References

http://marc.info/?l=bugtraq&m=109761632831563&w=2
http://www.ciac.org/ciac/bulletins/p-012.shtml
http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10
http://www.kb.cert.org/vuls/id/203126
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-036
https://exchange.xforce.ibmcloud.com/vulnerabilities/17641
https://exchange.xforce.ibmcloud.com/vulnerabilities/17661
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A246
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4392
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5021
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5070
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5926

Get alerted when CVE-2004-0574 or the next vulnerability affects your stack