PT-2004-1309 · Microsoft · Windows Nt 4.0+1

Published 2004-04-16 · Updated 2018-10-12 · CVE-2004-0118

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT 4.0 Windows 2000

Description The issue concerns the Virtual DOS Machine (VDM) subsystem, which fails to properly validate system structures. This allows local users to access protected kernel memory and execute arbitrary code.

Recommendations For Windows NT 4.0, update to a version that includes the necessary security patches to fix the VDM subsystem issue. For Windows 2000, apply the relevant security update to resolve the vulnerability in the VDM subsystem.

Fix

Related Identifiers

CVE-2004-0118

Affected Products

Windows 2000

Windows Nt 4.0

References · 11

• http://kb.cert.org/vuls/id/783748 · Patch
• http://eeye.com/html/Research/Advisories/AD20040413E.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0118 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 · Vendor Advisory
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718 · Note
• http://securityfocus.com/bid/10117 · Note
• http://us-cert.gov/cas/techalerts/TA04-104A.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15714 · Note
• http://ciac.org/ciac/bulletins/o-114.shtml · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512 · Note