CVE-2004-0118
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 22%
exploitation probability
22%top 2% of all CVEs
observed exploitation
nono source reports it
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.
Affected products
n/a · n/aReferences
http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.htmlhttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011https://exchange.xforce.ibmcloud.com/vulnerabilities/15714https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718http://www.ciac.org/ciac/bulletins/o-114.shtmlhttp://www.eeye.com/html/Research/Advisories/AD20040413E.htmlhttp://www.kb.cert.org/vuls/id/783748http://www.securityfocus.com/bid/10117http://www.us-cert.gov/cas/techalerts/TA04-104A.html