What’s Vulnerable › Vulnerabilities

CVE-2003-0910

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 26.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-04-16 · updated 2026-06-16

Description

The NtSetLdtEntries function in the programming interface for the Local Descriptor Table (LDT) in Windows NT 4.0 and Windows 2000 allows local attackers to gain access to kernel memory and execute arbitrary code via an expand-down data segment descriptor descriptor that points to protected memory.

Affected products

• Microsoft Windows 2000: all versions
• Microsoft Windows Nt: 4.0

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html
• http://www.ciac.org/ciac/bulletins/o-114.shtml
• http://www.eeye.com/html/Research/Advisories/AD20040413D.html
• http://www.kb.cert.org/vuls/id/122076
• http://www.securityfocus.com/bid/10122
• http://www.us-cert.gov/cas/techalerts/TA04-104A.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15707
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A890
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A911
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020068.html
• http://www.ciac.org/ciac/bulletins/o-114.shtml

Get alerted when CVE-2003-0910 or the next vulnerability affects your stack