CVE-2004-0213
High · 7.8CVSS
7.8
EPSS
20.1%
Published
Aug 6, 2004
CISA due date
—
The record
Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-53714 Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or… CWE-306
- CVE-2026-50451 Missing authentication for critical function in Windows Routing and Remote Access Service… CWE-306
- CVE-2026-50444 Missing authentication for critical function in Windows Server Update Service allows an… CWE-306
- CVE-2026-50333 Missing authentication for critical function in Windows Spaceport.sys allows an… CWE-306
- CVE-2026-49174 Missing authentication for critical function in Microsoft Windows DNS allows an… CWE-306
- CVE-2026-44025 Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL… CWE-306
- CVE-2026-50136 Budibase is an open-source low-code platform. CWE-306
- CVE-2026-13325 A flaw was found in KubeVirt's migration proxy. CWE-306