7.2
CVSSv2

CVE-2003-0910

Published: 01/06/2004 Updated: 12/10/2018
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local malicious users to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows 2000

microsoft windows nt 4.0

Exploits

source: wwwsecurityfocuscom/bid/10122/info Microsoft Windows Local Descriptor Table programming interface is prone to a privilege-escalation vulnerability A local attacker may be able to create a malicious entry in the Local Descriptor Table This entry may point into protected memory Since this memory space is reserved for kernel oper ...