7.2

CVE-2004-0208

EPSS 3.39%
Published 03.11.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.

Affected products Warnungen 0 Metrics 2 CWE 0 References 13

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Windows 2000

Microsoft ≫ Windows 2003 Server Versionr2

Microsoft ≫ Windows Nt Version4.0

Microsoft ≫ Windows Xp Updategold

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.39%	0.87

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032

https://exchange.xforce.ibmcloud.com/vulnerabilities/17658

http://marc.info/?l=bugtraq&m=109772135404427&w=2

http://www.kb.cert.org/vuls/id/910998

Patch

Third Party Advisory

US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/16580

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1751

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3161

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3953

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4316

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4762

https://nvd.nist.gov/vuln/detail/CVE-2004-0208

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0208

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0208

EUVD