CVE-2004-0118

CVE Database · CVE-2004-0118

CVE-2004-0118

· N/AModified

CVSS v3.1

N/A

EPSS

22.35%

Published

Jun 1, 2004

Modified

Apr 15, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.

Affected Products (2)

microsoft · windows_2000vulnerable

microsoft · windows_ntvulnerable

References (20)

http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html

http://www.ciac.org/ciac/bulletins/o-114.shtml

http://www.eeye.com/html/Research/Advisories/AD20040413E.html

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/783748

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/10117

http://www.us-cert.gov/cas/techalerts/TA04-104A.html

Third Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011

KEV Catalog EPSS Scores Vendors All CVEs