CVE-2004-0202
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as...
CVE-2004-0202 is a medium vulnerability (CVSS 5.0) in Microsoft Directx, published June 11, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 26.3%, the 98th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 26.3%EPSS, 98th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
Exploit likelihood
Affected products
What each source reports
NVD Score used 5.0
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
CVE-2004-0202- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
CVE-2004-0202- Updated
- 2026-11-02
EUVDEUVD-2004-0202No score
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
EUVD-2004-0202- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f7gm-fj67-499wNo score
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as...
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
- Record
GHSA-f7gm-fj67-499w- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
exchange.xforce.ibmcloud.com/vulnerabilities/16306
osvdb.org/6742
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2413
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-016
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2516
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2190
Show 6 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1027
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2705
securityfocus.com/bid/10487
secunia.com/advisories/11802
nvd.nist.gov/vuln/detail/CVE-2004-0202
github.com/advisories/GHSA-f7gm-fj67-499w