CVE-2004-0116
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows...
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
Exploit likelihood
What each source reports
NVD Score used
5.0
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
- Record
CVE-2004-0116- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
- Record
CVE-2004-0116- Updated
- 2026-11-02
EUVDEUVD-2004-0116 No score
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
- Record
EUVD-2004-0116- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2mhq-qg26-p24h No score
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows...
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
- Record
GHSA-2mhq-qg26-p24h- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0116 is a medium vulnerability (CVSS 5.0) in Microsoft Windows 2000, published April 16, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 37.6%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A957
ciac.org/ciac/bulletins/o-115.shtml
secunia.com/advisories/11065
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A955
securityfocus.com/bid/10127
kb.cert.org/vuls/id/417052
Show 8 moreShow less
us-cert.gov/cas/techalerts/TA04-104A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012
eeye.com/html/Research/Advisories/AD20040413A.html
securitytracker.com/alerts/2004/Apr/1009758.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A958
exchange.xforce.ibmcloud.com/vulnerabilities/15708
nvd.nist.gov/vuln/detail/CVE-2004-0116
github.com/advisories/GHSA-2mhq-qg26-p24h