CVE-2004-0214: Microsoft Internet Explorer

High severity, CVSS 10.0. EPSS: 47% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.

Affected products

• Microsoft Internet Explorer: version 6.0.2900 only
• Microsoft Windows 2000: any version
• Microsoft Windows 98: any version
• Microsoft Windows Me: any version
• Microsoft Windows XP: any version

Published 2004-11-03. Last modified 2026-06-16.