CVE-2010-0232

Windows kernel fails to properly validate BIOS calls when running 16-bit applications, allowing a local attacker to craft malicious data structures that trigger exceptions in the kernel's trap handler, leading to privilege escalation.

A local privilege escalation vulnerability exists in the Windows kernel's Virtual DOS Machine (NTVDM) subsystem when 16-bit application support is enabled on 32-bit x86 systems. The vulnerability stems from improper validation of BIOS calls and exception handling in the #GP trap handler (nt!KiTrap0D). An attacker can exploit this by crafting a malicious VDM_TIB structure in the Thread Environment Block and invoking NtVdmControl, causing the kernel to execute privileged code in an attacker-controlled context.