CVE-2004-0116

EXPLOITED

Microsoft Windows 2000, XP, and 2003 - Denial of Service via DCOM Activation Request

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2004-0116 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.

References (12)

Core 12
Core References
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A957
Third Party Advisory, US Government Resource third-party-advisory government-resource x_refsource_ciac
http://www.ciac.org/ciac/bulletins/o-115.shtml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/11065/
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A955
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/10127
Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/417052
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA04-104A.html
Patch, Vendor Advisory third-party-advisory x_refsource_eeye
http://www.eeye.com/html/Research/Advisories/AD20040413A.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/alerts/2004/Apr/1009758.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A958
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15708

Scores

EPSS 0.3755
EPSS Percentile 98.4%

Details

VulnCheck KEV 2017-06-20
Status published
Products (3)
microsoft/windows_2000
microsoft/windows_2003_server r2
microsoft/windows_xp
Published Jun 01, 2004
Tracked Since Feb 18, 2026