CVE-2004-1649

CVE-2004-1649 describes a buffer overflow vulnerability in Microsoft Msinfo32.exe, affecting Microsoft Windows 2000. A local attacker could potentially execute arbitrary code by supplying an excessively long filename via the msinfo_file command line parameter. This vulnerability has a CVSS score of 7.2, indicating high severity with local access, low attack complexity, and complete impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting it is not a widely targeted or discussed threat.