{"id":"CVE-2004-0206","aliases":["EUVD-2004-0206","GHSA-633f-4wqf-793j"],"status":"published","title":"Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows...","description":"Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an \"unchecked buffer,\" possibly a buffer overflow.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.74657,"percentile":0.99504,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-10-16T04:00:00Z","modified":"2026-06-16T22:05:09Z","exploits":[{"source":"exploitdb","id":"EDB-16371","title":"Microsoft NetDDE Service - Remote Overflow (MS04-031) (Metasploit)","type":"remote","platform":"windows","date":"2010-07-03","verified":true,"url":"https://www.exploit-db.com/exploits/16371"},{"source":"exploitdb","id":"EDB-734","title":"Microsoft Windows - NetDDE Remote Buffer Overflow (MS04-031)","type":"remote","platform":"windows","date":"2004-12-31","verified":true,"url":"https://www.exploit-db.com/exploits/734"},{"source":"metasploit","id":"exploit/windows/smb/ms04_031_netdde","title":"MS04-031 Microsoft NetDDE Service Overflow","type":"exploit","platform":"Windows","date":"2004-10-12","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/smb/ms04_031_netdde"}],"products":[{"vendor":"microsoft","product":"windows_2000"},{"vendor":"microsoft","product":"windows_2003_server"},{"vendor":"microsoft","product":"windows_98"},{"vendor":"microsoft","product":"windows_nt"},{"vendor":"microsoft","product":"windows_xp"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17657","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2394","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4592","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://www.securityfocus.com/bid/11372","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.kb.cert.org/vuls/id/640488","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3120","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1852","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=109786703930674\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/12803/","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-031","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16556","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5074","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6788","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3242","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-0206"},{"url":"http://secunia.com/advisories/12803"},{"url":"https://github.com/advisories/GHSA-633f-4wqf-793j"}],"sources":{"cve":[{"id":"CVE-2004-0206","description":"Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an \"unchecked buffer,\" possibly a buffer overflow.","status":"published","published":"2004-10-16T04:00:00Z","modified":"2024-08-08T00:10:03.679Z","updated_at":"2026-11-02T14:34:54.758165Z"}],"euvd":[{"id":"EUVD-2004-0206","description":"Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an \"unchecked buffer,\" possibly a buffer overflow.","status":"published","published":"2004-10-16T04:00:00Z","modified":"2024-08-08T00:10:03Z","updated_at":"2026-11-03T01:15:20.586153Z"}],"ghsa":[{"id":"GHSA-633f-4wqf-793j","title":"Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows...","description":"Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an \"unchecked buffer,\" possibly a buffer overflow.","status":"published","published":"2022-04-29T02:57:20Z","modified":"2025-04-03T04:02:43Z","updated_at":"2026-11-02T15:00:39.470148Z"}],"nvd":[{"id":"CVE-2004-0206","description":"Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an \"unchecked buffer,\" possibly a buffer overflow.","status":"published","published":"2004-11-03T05:00:00Z","modified":"2026-06-16T22:05:09.84Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:51.000028Z"}]}}