CVE-2002-2401

EPSS 1.81%
Veröffentlicht 31.12.2002 05:00:00
Zuletzt bearbeitet 16.06.2026 22:01:14
Erkennungen
Login

NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

NVD 37 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 2000

Microsoft ≫ Windows 2000 Update sp1

Microsoft ≫ Windows 2000 Update sp2

Microsoft ≫ Windows 2000 Update sp3

Microsoft ≫ Windows Nt Version 4.0

Microsoft ≫ Windows Nt Version 4.0 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition enterprise

Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition terminal_srv

Microsoft ≫ Windows Nt Version 4.0 Update sp1 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition enterprise

Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition terminal_srv

Microsoft ≫ Windows Nt Version 4.0 Update sp2 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition enterprise

Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition terminal_srv

Microsoft ≫ Windows Nt Version 4.0 Update sp3 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition enterprise

Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition terminal_srv

Microsoft ≫ Windows Nt Version 4.0 Update sp4 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition enterprise

Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition terminal_srv

Microsoft ≫ Windows Nt Version 4.0 Update sp5 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition enterprise

Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition terminal_srv

Microsoft ≫ Windows Nt Version 4.0 Update sp6 Edition workstation

Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition enterprise

Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition server

Microsoft ≫ Windows Nt Version 4.0 Update sp6a Edition workstation

Microsoft ≫ Windows Xp Edition home

Microsoft ≫ Windows Xp Edition pro

Microsoft ≫ Windows Xp Update sp1 Edition home

Microsoft ≫ Windows Xp Update sp1 Edition pro

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.81%	0.757

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	3.6	3.9	4.9	AV:L/AC:L/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://archives.neohapsis.com/archives/bugtraq/2002-09/0211.html

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B319458

http://www.abtrusion.com/msexe16.asp

http://www.iss.net/security_center/static/10132.php

http://www.securityfocus.com/bid/5740

https://nvd.nist.gov/vuln/detail/CVE-2002-2401

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-2401

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-2401

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2002-2401