CVEvulnerability
CVE-2003-0910
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-06-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.
Affected configurations
• microsoft windows 2000
• microsoft windows nt 4.0
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html lists.grok.org.uk
- http://www.ciac.org/ciac/bulletins/o-114.shtml www.ciac.org
- http://www.eeye.com/html/Research/Advisories/AD20040413D.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/122076 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/10122 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA04-104A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15707 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911 oval.cisecurity.org
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html lists.grok.org.uk
- http://www.ciac.org/ciac/bulletins/o-114.shtml www.ciac.org
- http://www.eeye.com/html/Research/Advisories/AD20040413D.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/122076 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/10122 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA04-104A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15707 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911 oval.cisecurity.org