7.2

CVE-2003-0910

EPSS 4.93%
Veröffentlicht 01.06.2004 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 13

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 2000

Microsoft ≫ Windows Nt Version4.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.93%	0.892

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA04-104A.html

Third Party Advisory

US Government Resource

http://www.ciac.org/ciac/bulletins/o-114.shtml

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011

http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html

http://www.eeye.com/html/Research/Advisories/AD20040413D.html

Patch

Vendor Advisory

http://www.kb.cert.org/vuls/id/122076

Patch

Third Party Advisory

US Government Resource

http://www.securityfocus.com/bid/10122

https://exchange.xforce.ibmcloud.com/vulnerabilities/15707

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911

https://nvd.nist.gov/vuln/detail/CVE-2003-0910

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-0910

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-0910

EUVD