CVEvulnerability
CVE-2004-0118
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-06-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.
Affected configurations
• microsoft windows 2000
• microsoft windows nt 4.0
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html lists.grok.org.uk
- http://www.ciac.org/ciac/bulletins/o-114.shtml www.ciac.org
- http://www.eeye.com/html/Research/Advisories/AD20040413E.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/783748 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/10117 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA04-104A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15714 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718 oval.cisecurity.org
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html lists.grok.org.uk
- http://www.ciac.org/ciac/bulletins/o-114.shtml www.ciac.org
- http://www.eeye.com/html/Research/Advisories/AD20040413E.html Patch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/783748 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/10117 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA04-104A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15714 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718 oval.cisecurity.org