PT-2004-1309 · Microsoft · Windows Nt 4.0+1

Publicado 2004-04-16 · Atualizado 2018-10-12 · CVE-2004-0118

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT 4.0 Windows 2000

Description The issue concerns the Virtual DOS Machine (VDM) subsystem, which fails to properly validate system structures. This allows local users to access protected kernel memory and execute arbitrary code.

Recommendations For Windows NT 4.0, update to a version that includes the necessary security patches to fix the VDM subsystem issue. For Windows 2000, apply the relevant security update to resolve the vulnerability in the VDM subsystem.

Correção

Identificadores relacionados

CVE-2004-0118

Produtos afetados

Windows 2000

Windows Nt 4.0

Referências · 11

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html · Nota
• http://kb.cert.org/vuls/id/783748 · Correção
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718 · Nota
• http://securityfocus.com/bid/10117 · Nota
• http://us-cert.gov/cas/techalerts/TA04-104A.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15714 · Nota
• http://ciac.org/ciac/bulletins/o-114.shtml · Nota
• http://eeye.com/html/Research/Advisories/AD20040413E.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0118 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512 · Nota