CVE-2004-2527

Severity: medium (CVSS 5.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html
http://securitytracker.com/id?1010836
http://www.osvdb.org/8368
https://exchange.xforce.ibmcloud.com/vulnerabilities/16851
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html
http://securitytracker.com/id?1010836
http://www.osvdb.org/8368
https://exchange.xforce.ibmcloud.com/vulnerabilities/16851

Get alerted when CVE-2004-2527 or the next vulnerability affects your stack