Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2004

26 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-0533
    56Plan

    Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (L

    HighCVSS 7.5WeaponizedEPSS 85%

    microsoft · netmeetingJun 1, 2004

  • CVE-2003-0663
    30Monitor

    Unknown vulnerability in the Local Security Authority Subsystem Service (LSASS) in Windows 2000 domain controllers allows remote attackers t

    MediumCVSS 5.0No exploitEPSS 32%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2003-0719
    54Plan

    Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Win

    HighCVSS 7.5WeaponizedEPSS 81%

    microsoft · netmeetingJun 1, 2004

  • CVE-2003-0806
    40Plan

    Buffer overflow in the Windows logon process (winlogon) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, and XP SP1, when a member of

    HighCVSS 7.5No exploitEPSS 33%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2003-0807
    32Monitor

    Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal

    MediumCVSS 5.0No exploitEPSS 39%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2003-0906
    38Monitor

    Buffer overflow in the rendering for (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats in Microsoft Windows NT 4.0 SP6

    HighCVSS 7.6No exploitEPSS 25%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2003-0907
    27Monitor

    Help and Support Center in Microsoft Windows XP SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary

    MediumCVSS 5.1No exploitEPSS 21%

    microsoft · windows server 2003Jun 1, 2004

  • CVE-2003-0908
    36Monitor

    The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary co

    HighCVSS 7.2Proof of conceptEPSS 25%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2003-0909
    34Monitor

    Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe

    HighCVSS 7.2No exploitEPSS 20%

    microsoft · windows xpJun 1, 2004

  • CVE-2003-0910
    36Monitor

    The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows loc

    HighCVSS 7.2Proof of conceptEPSS 26%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2004-0116
    31Monitor

    An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers t

    MediumCVSS 5.0No exploitEPSS 37%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2004-0117
    38Monitor

    Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote at

    HighCVSS 7.5No exploitEPSS 26%

    microsoft · netmeetingJun 1, 2004

  • CVE-2004-0118
    35Monitor

    The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, w

    HighCVSS 7.2No exploitEPSS 22%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2004-0119
    42Plan

    The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to ca

    HighCVSS 7.5No exploitEPSS 39%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2004-0120
    35Monitor

    The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to c

    MediumCVSS 5.0Proof of conceptEPSS 50%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2004-0123
    39Monitor

    Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote a

    HighCVSS 7.5No exploitEPSS 29%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2004-0124
    17Monitor

    The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via a

    LowCVSS 2.6No exploitEPSS 21%

    microsoft · windows 2000Jun 1, 2004

  • CVE-2004-0179
    30Monitor

    Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversio

    MediumCVSS 6.8Proof of conceptEPSS 11%

    webdav · neonJun 1, 2004

  • CVE-2004-0197
    38Monitor

    Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database quer

    HighCVSS 7.5No exploitEPSS 26%

    microsoft · jetJun 1, 2004

  • CVE-2004-0385
    45Plan

    Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers

    CriticalCVSS 10.0No exploitEPSS 15%

    oracle · application server web cacheJun 1, 2004

  • CVE-2004-0389
    46Plan

    RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that

    HighCVSS 7.5Proof of conceptEPSS 54%

    realnetworks · helix universal serverJun 1, 2004

  • CVE-2004-2044
    33Monitor

    PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke

    HighCVSS 7.5Proof of conceptEPSS 11%

    francisco burzi · php-nukeJun 1, 2004

  • CVE-2002-1580
    35Monitor

    Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length va

    HighCVSS 7.5Proof of conceptEPSS 16%

    carnegie mellon university · cyrus imap serverJun 14, 2004

  • CVE-2003-1041
    46Plan

    Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL co

    HighCVSS 7.5Proof of conceptEPSS 52%

    microsoft · ieJun 14, 2004

  • CVE-2004-0199
    28Monitor

    Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attacke

    MediumCVSS 5.1No exploitEPSS 26%

    microsoft · windows 2003 serverJun 14, 2004

  • CVE-2004-0396
    50Plan

    Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to

    HighCVSS 7.5Proof of conceptEPSS 67%

    cvs · cvsJun 14, 2004