CVE-2004-0208

Current Description

The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.

Basic Data

PublishedNovember 03, 2004
Last ModifiedOctober 12, 2018
Assignercve@mitre.org
Data TypeCVE
Data FormatMITRE
Data Version4.0
Problem TypeNVD-CWE-Other
CVE Data Version4.0

Base Metric V2

CVSS 2 - Version2.0
CVSS 2 - Vector StringAV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS 2 - Access VectorLOCAL
CVSS 2 - Access ComplexityLOW
CVSS 2 - AuthenticationNONE
CVSS 2 - Confidentiality ImpactCOMPLETE
CVSS 2 - Availability ImpactCOMPLETE
CVSS 2 - Base Score7.2
SeverityHIGH
Exploitability Score3.9
Impact Score10.0
Obtain All Privilegetrue
Obtain User Privilegefalse
Obtain Other Privilegefalse

Base Metric V3

No data provided.

Configurations

  • OR - Configuration 1
    Cpe VersionPartVendorProductVersionUpdateEditionLanguageSW EditionTarget SWTarget HWOtherVersion Start IncludingVersion End IncludingVersion Start ExcludingVersion End Excluding
    2.3OSMicrosoftWindows 2000********
    2.3OSMicrosoftWindows 2003 Serverr2*******
    2.3OSMicrosoftWindows Nt4.0*******
    2.3OSMicrosoftWindows Xp*gold******

Vulnerable Software List

VendorProductVersions
Microsoft Windows Xp *
Microsoft Windows 2000 *
Microsoft Windows 2003 Server r2
Microsoft Windows Nt 4.0

References

NameSourceURLTags
20041013 EEYE: Windows VDM #UD Local Privilege Escalationhttp://marc.info/?l=bugtraq&m=109772135404427&w=2BUGTRAQ
VU#910998http://www.kb.cert.org/vuls/id/910998CERT-VNPATCH Third Party Advisory US Government Resource
MS04-032https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032MS
win-vdm-gain-privilege(16580)https://exchange.xforce.ibmcloud.com/vulnerabilities/16580XF
win-ms04032-patch(17658)https://exchange.xforce.ibmcloud.com/vulnerabilities/17658XF
oval:org.mitre.oval:def:1751https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1751OVAL
oval:org.mitre.oval:def:3161https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3161OVAL
oval:org.mitre.oval:def:3953https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3953OVAL
oval:org.mitre.oval:def:4316https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4316OVAL
oval:org.mitre.oval:def:4762https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4762OVAL