CVE-2003-0910

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 26%

from disclosure to weapon2 days

Published on NVDApr 16

1st PoC+2d

exploitation probability

26%top 2% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/23989

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 https://exchange.xforce.ibmcloud.com/vulnerabilities/15707 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911 http://www.ciac.org/ciac/bulletins/o-114.shtml http://www.eeye.com/html/Research/Advisories/AD20040413D.html http://www.kb.cert.org/vuls/id/122076 http://www.securityfocus.com/bid/10122 http://www.us-cert.gov/cas/techalerts/TA04-104A.html