CVE-2004-0212: Avaya Definity One Media Server

High severity, CVSS 10.0. EPSS: 63.5% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.

Affected products

• Avaya Definity One Media Server: any version
• Avaya IP600 Media Servers: any version
• Avaya Modular Messaging Message Storage Server: version s3400 only
• Avaya s8100: any version
• Microsoft Ie: version 6.0 only
• Microsoft Windows 2000: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2004-08-06. Last modified 2026-06-16.