CVE-2004-0574

The record

The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.

Affected packages

Related vulnerabilities

• CVE-2026-54240 libde265 is an open source implementation of the h.265 video codec. CWE-787
• CVE-2026-0799 In BPF instructions that load/store a value from/to a scratch memory register the… CWE-787
• CVE-2026-85091 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the… CWE-787
• CVE-2026-13732 A flaw was found in GDB's STABS debug format parser. CWE-787
• CVE-2026-18393 A flaw was found in FFmpeg. CWE-787
• CVE-2026-18374 Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument… CWE-787
• CVE-2026-68514 OpenEXR is the reference implementation and specification for the EXR image file format… CWE-787
• CVE-2026-68515 OpenEXR is the reference implementation and specification for the EXR image format… CWE-787