CVE-2004-0893

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-01-10 · updated 2026-06-16

Description

The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: datacenter_64-bit-sp1_beta_1, enterprise, enterprise-sp1_beta_1, enterprise_64-bit, enterprise_64-bit-sp1_beta_1, r2 (+5)
Microsoft Windows Nt: 4.0, 4.0-sp1, 4.0-sp2, 4.0-sp3, 4.0-sp4, 4.0-sp5 (+2)
Microsoft Windows XP Service Pack 3: all versions

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044
https://exchange.xforce.ibmcloud.com/vulnerabilities/18339
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1321
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1561
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1581
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1886
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2008
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4021
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4458
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A450
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-044
https://exchange.xforce.ibmcloud.com/vulnerabilities/18339

Get alerted when CVE-2004-0893 or the next vulnerability affects your stack