CVE-2004-1080

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 79.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-01 · updated 2026-06-16

Description

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and possibly execute arbitrary code via a modified memory pointer in a WINS replication packet to TCP port 42, aka the "Association Context Vulnerability."

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: 2000, 2003, enterprise, enterprise_64-bit, r2, standard (+1)
Microsoft Windows Nt: 4.0, 4.0-sp1, 4.0-sp2, 4.0-sp3, 4.0-sp4, 4.0-sp5 (+2)

References

http://marc.info/?l=bugtraq&m=110150370506704&w=2
http://secunia.com/advisories/13328/
http://securitytracker.com/id?1012516
http://support.microsoft.com/kb/890710
http://www.ciac.org/ciac/bulletins/p-054.shtml
http://www.immunitysec.com/downloads/instantanea.pdf
http://www.kb.cert.org/vuls/id/145134
http://www.osvdb.org/12378
http://www.securityfocus.com/bid/11763
http://xforce.iss.net/xforce/alerts/id/184
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-045
https://exchange.xforce.ibmcloud.com/vulnerabilities/18259

Get alerted when CVE-2004-1080 or the next vulnerability affects your stack