CVE-2004-0118

Published: Jun 1, 2004Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.

Affected (2)

Products: Microsoft: Windows 2000, Windows Nt

Microsoft

2 products

Windows 2000

Windows Nt

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows Nt	Version 4.0

References (20)

http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html

Source: cve@mitre.org

http://www.ciac.org/ciac/bulletins/o-114.shtml

Source: cve@mitre.org

http://www.eeye.com/html/Research/Advisories/AD20040413E.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/783748

Source: cve@mitre.org

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/10117

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA04-104A.html

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/15714

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html