Sploitus

CVE-2002-1230

10 known exploits for CVE-2002-1230

NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation."

Affected products
Windows 2000, Windows Nt 4.0 Terminal Server Edition, Windows Nt 4.0, Windows Xp
Microsoft Windows 2000
All versions
Microsoft Windows 2000 Terminal Services
All versions
Fix
Available
CVSS 2.0
4.6 MEDIUM
EPSS
2.4% (82th percentile)
NVD status
Modified
Published
2004-09-01
CVE-2002-1230 at NVD
Authoritative description, scoring and affected products

10 known exploits for CVE-2002-1230

Proof-of-concept code and exploit modules indexed by Sploitus

Microsoft Windows XP/2000/NT 4.0 - NetDDE Privilege Escalation (2)
2002-10-09 SerusEXPLOITDBC
Microsoft Windows XP/2000/NT 4.0 - NetDDE Privilege Escalation (1)
2002-10-09 SerusEXPLOITDBC
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (1)
2002-08-06 sectroyerEXPLOITDBC
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (2)
2002-08-06 Oliver LaveryEXPLOITDBC
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (4)
2002-08-06 Brett MooreEXPLOITDBC
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (5)
2002-08-06 Oliver LaveryEXPLOITDBC
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (6)
2002-08-06 Brett MooreEXPLOITDBC
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (7)
2002-08-06 Ovidio MalloEXPLOITDB
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (8)
2002-08-06 anonymousEXPLOITDB
Microsoft Windows XP/2000/NT 4.0 - Window Message Subsystem Design Error (3)
2002-08-06 Brett MooreEXPLOITDBC