CVE-2004-0207
"Shatter" style vulnerability in the Window Management application programming interface (API)...
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
Exploit likelihood
What each source reports
NVD Score used
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
- Record
CVE-2004-0207- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
- Record
CVE-2004-0207- Updated
- 2026-11-02
EUVDEUVD-2004-0207 No score
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
- Record
EUVD-2004-0207- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w79f-hjvc-f3mf No score
"Shatter" style vulnerability in the Window Management application programming interface (API)...
"Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.
- Record
GHSA-w79f-hjvc-f3mf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-0207 is a low vulnerability (CVSS 2.1) in Microsoft Windows 2000, published October 16, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.82%, the 78th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/16579
marc.info?l=bugtraq&m=109777417922695&w=2
kb.cert.org/vuls/id/218526
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032
nvd.nist.gov/vuln/detail/CVE-2004-0207
github.com/advisories/GHSA-w79f-hjvc-f3mf