CVE-2004-1624

CVE-2004-1624 describes a local privilege escalation vulnerability in Altiris Carbon Copy 6.0.5257. The software fails to drop system privileges when launching external programs, such as Notepad, through its help topic interface in CCW32.exe or the help button in CCSched.exe. This allows a local attacker to gain elevated privileges on the affected system. The vulnerability has a CVSS score of 7.2, indicating high severity due to its low attack complexity and complete compromise of confidentiality, integrity, and availability. While the EPSS score is very low, suggesting minimal real-world exploitation, the FAUCET Risk Score is moderate at 45/100. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are also absent, indicating a lack of widespread attention or exploitation.