CVE-2004-1134

CVE-2004-1134 describes a critical buffer overflow vulnerability within the Microsoft W3Who ISAPI (w3who.dll), allowing remote attackers to trigger a denial of service and potentially execute arbitrary code by supplying an excessively long query string. This vulnerability carries a maximum CVSS score of 10.0, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code is publicly available through a Metasploit module, suggesting a high potential for exploitation despite minimal community discussion or media coverage.