CVE-2004-0206
Microsoft Windows NetDDE - Remote Code Execution via Malicious Message
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2004-0206.
PoCs published by Metasploit, houseofdabus, pusscat, including Metasploit module exploits/windows/smb/ms04_031_netdde.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the Microsoft NetDDE service (CVE-2004-0206) on Windows 2000 SP4 and XP SP0. It leverages DCERPC to trigger the vulnerability and execute arbitrary payloads via a crafted overflow chunk.
Description
Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.
Exploits (3)
This exploit targets a stack buffer overflow in the Microsoft NetDDE service (CVE-2004-0206) on Windows 2000 SP4 and XP SP0. It leverages DCERPC to trigger the vulnerability and execute arbitrary payloads via a crafted overflow chunk.
This is a proof-of-concept exploit for CVE-2004-0206, targeting a buffer overflow in NetDDE services. It includes shellcode for both port binding and connect-back payloads, demonstrating remote code execution capabilities.
This Metasploit module exploits a stack buffer overflow in the NetDDE service (CVE-2004-0206) by sending a maliciously crafted DCERPC request to the 'nddeapi' pipe, leading to remote code execution on vulnerable Windows systems (pre-XP SP1). The exploit leverages a known return address (0x77e56f43) and includes a payload with specific bad character restrictions.