Vulnerability in Microsoft W3who.dll
CVE-2004-1134
Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long query string.
EPSS: 0.723 (99.4th percentile) — read the EPSS interpretation.
Affected products
- Microsoft W3who.dll
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2004-1134?
- CVE-2004-1134 is a vulnerability in Microsoft W3who.dll. Published 2005-01-10.
- Is CVE-2004-1134 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.