CVE-2004-2527 — The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running

Back Back to CVE browser

MEDIUM

The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running

Published Oct 25, 2005

5.4

MEDIUM

CVSS 2.0

EPSS 1.73%

Description

The local and remote desktop login screens in Microsoft Windows XP before SP2 and 2003 allow remote attackers to cause a denial of service (CPU and memory consumption) by repeatedly using the WinKey+"U" key combination, which causes multiple copies of Windows Utility Manager to be loaded more quickly than they can be closed when the copies detect that another instance is running.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.73% 0.01732

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01732

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (11 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.73% (0.01732)	76.79th	v5 (v2026.06.15)
Jun 15, 2026	1.73% (0.01732)	74.59th	v5 (v2026.06.15)
Mar 17, 2025	1.00% (0.01000)	75.45th	v4 (v2025.03.14)
Dec 12, 2024	0.95% (0.00947)	83.82th	v3 (v2023.03.01)
Mar 20, 2024	0.95% (0.00953)	82.85th	v3 (v2023.03.01)
Mar 20, 2023	0.95% (0.00953)	80.84th	v3 (v2023.03.01)
Mar 7, 2023	0.89% (0.00894)	80.18th	v3 (v2023.03.01)
Mar 6, 2023	1.21% (0.01213)	66.61th	v2 (v2022.01.01)
Feb 17, 2023	1.21% (0.01213)	66.22th	v2 (v2022.01.01)
Apr 1, 2022	1.21% (0.01213)	64.21th	v2 (v2022.01.01)
Feb 4, 2022	1.21% (0.01213)	40.54th	v2 (v2022.01.01)

Weaknesses (0)

No CWE recorded.

References (4)

http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html
mailing-listx_refsource_FULLDISCExploitVendor Advisory
http://securitytracker.com/id?1010836
vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/8368
vdb-entryx_refsource_OSVDBExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16851
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/fulldisclosure/2004-07/1313.html		mailing-listx_refsource_FULLDISCExploitVendor Advisory
http://securitytracker.com/id?1010836		vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/8368		vdb-entryx_refsource_OSVDBExploitPatchVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16851		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 25, 2005

Updated Aug 8, 2024

Reserved Oct 25, 2005

Link CVE-2004-2527

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2004-2527

Red Hat

Severity n/a

Public date n/a

Links CVE-2004-2527