CVE-2003-0910 The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arb...
HighCVSS 7.2
EPSS 26.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
References
- 20040413 EEYE: Windows Expand-Down Data Segment Local Privilege Escalation mailing-list
- O-114 government-resource third-party-advisory
- AD20040413D patch third-party-advisory vendor-advisory
- VU#122076 patch third-party-advisory us-government-resource
- 10122 vdb-entry
- TA04-104A third-party-advisory us-government-resource
- MS04-011 vendor-advisory
- win-ldt-gain-privileges(15707) vdb-entry
- oval:org.mitre.oval:def:890 signature vdb-entry
- oval:org.mitre.oval:def:911 signature vdb-entry