CVE

Id
8546  
CVE No.
CVE-2004-0118  
Status
Candidate  
Description
The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.  
Phase
Assigned (20040203)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
52907 8546 CVE-2004-0118 FULLDISC:20040413 EEYE: Windows VDM TIB Local Privilege Escalation  View
52908 8546 CVE-2004-0118 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html  View
52909 8546 CVE-2004-0118 EEYE:AD20040413E  View
52910 8546 CVE-2004-0118 URL:http://www.eeye.com/html/Research/Advisories/AD20040413E.html  View
52911 8546 CVE-2004-0118 MS:MS04-011  View
52912 8546 CVE-2004-0118 URL:http://www.microsoft.com/technet/security/bulletin/ms04-011.asp  View
52913 8546 CVE-2004-0118 CERT:TA04-104A  View
52914 8546 CVE-2004-0118 URL:http://www.us-cert.gov/cas/techalerts/TA04-104A.html  View
52915 8546 CVE-2004-0118 CERT-VN:VU#783748  View
52916 8546 CVE-2004-0118 URL:http://www.kb.cert.org/vuls/id/783748  View
52917 8546 CVE-2004-0118 CIAC:O-114  View
52918 8546 CVE-2004-0118 URL:http://www.ciac.org/ciac/bulletins/o-114.shtml  View
52919 8546 CVE-2004-0118 BID:10117  View
52920 8546 CVE-2004-0118 URL:http://www.securityfocus.com/bid/10117  View
52921 8546 CVE-2004-0118 OVAL:oval:org.mitre.oval:def:1512  View
52922 8546 CVE-2004-0118 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1512  View
52923 8546 CVE-2004-0118 OVAL:oval:org.mitre.oval:def:1718  View
52924 8546 CVE-2004-0118 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1718  View
52925 8546 CVE-2004-0118 XF:win-vdm-gain-privileges(15714)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62790 JVNDB-2004-000131 Microsoft Windows の Negotiate SSP インターフェイスにおけるバッファオーバーフローの脆弱性 Microsoft Windows に含まれる Negotiate Security Software Provider (SSP) インタフェースには、認証プロトコルの選択中に使用される値のチェックの不備のため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0119 8546 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000131.html  View