NVD

Id
73998  
Name
CVE-2003-0910  
Description
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2004-06-01  
Modified Date
2017-07-10  
Seq
2003-0910  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
380450 73998 CVE-2003-0910 20040413 EEYE: Windows Expand-Down Data Segment Local Privilege Escalation  View
380451 73998 CVE-2003-0910 oval:org.mitre.oval:def:890  View
380452 73998 CVE-2003-0910 oval:org.mitre.oval:def:911  View
380453 73998 CVE-2003-0910 O-114  View
380454 73998 CVE-2003-0910 AD20040413D  View
380455 73998 CVE-2003-0910 VU#122076  View
380456 73998 CVE-2003-0910 MS04-011  View
380457 73998 CVE-2003-0910 10122  View
380458 73998 CVE-2003-0910 TA04-104A  View
380459 73998 CVE-2003-0910 win-ldt-gain-privileges(15707)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62786 JVNDB-2004-000127 Microsoft Windows の LDT における任意のコードを実行される脆弱性 Microsoft Windows には、 (1) NtSetLdtEntries() 関数がセグメントを作成する際のチェック不備のため、メモリ領域のどこからでもアクセスが可能なセグメントを作成できてしまう、(2) カーネル内部で入力のチェックに不備のため、不正なセグメントと併用することで任意のメモリ位置に書きこみが可能な脆弱性があります。 CVE-2003-0910 7733 CVE-2003-0910 73998 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000127.html 2004-04-13 2007-04-01 View