CVE-2002-2401

Severity: low (CVSS 3.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16
Weakness: CWE-264

Description

NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows Nt: 4.0, 4.0-sp1, 4.0-sp2, 4.0-sp3, 4.0-sp4, 4.0-sp5 (+2)
Microsoft Windows XP Service Pack 3: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2002-09/0211.html
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B319458
http://www.abtrusion.com/msexe16.asp
http://www.iss.net/security_center/static/10132.php
http://www.securityfocus.com/bid/5740
http://archives.neohapsis.com/archives/bugtraq/2002-09/0211.html
http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B319458
http://www.abtrusion.com/msexe16.asp
http://www.iss.net/security_center/static/10132.php
http://www.securityfocus.com/bid/5740

Get alerted when CVE-2002-2401 or the next vulnerability affects your stack