CVE-2004-0208

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-10-16 · updated 2026-06-16

Description

The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: r2
Microsoft Windows Nt: 4.0
Microsoft Windows XP Service Pack 3: all versions

References

http://marc.info/?l=bugtraq&m=109772135404427&w=2
http://www.kb.cert.org/vuls/id/910998
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-032
https://exchange.xforce.ibmcloud.com/vulnerabilities/16580
https://exchange.xforce.ibmcloud.com/vulnerabilities/17658
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1751
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3161
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3953
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4316
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4762
http://marc.info/?l=bugtraq&m=109772135404427&w=2
http://www.kb.cert.org/vuls/id/910998

Get alerted when CVE-2004-0208 or the next vulnerability affects your stack