CVE-2004-0119

No fix known EPSS 40%

The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.

Published 2004-04-16 · CVE record · OSV

Products: microsoft windows_2000, microsoft windows_server_2003, microsoft windows_xp