CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
Percentile
96.5%
Added: 02/24/2006
CVE: CVE-2004-0206
BID: 11372
OSVDB: 10689
Network Dynamic Data Exchange (NetDDE) is a Windows service which allows two applications to communicate with each other over a network.
A buffer overflow in the NetDDE service could allow a remote, anonymous attacker to execute arbitrary commands by sending a specially crafted NetDDE message to the vulnerable system.
Disable the NetDDE service or install the patch referenced in Microsoft Security Bulletin 04-031.
<http://www.microsoft.com/technet/security/Bulletin/MS04-031.mspx>
Windows