CVE-2006-0488

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-02-01 · updated 2026-06-16

Description

The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: r2
Microsoft Windows XP Service Pack 3: all versions

References

http://www.securityfocus.com/archive/1/423169/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/24471
http://www.securityfocus.com/archive/1/423169/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/24471

Get alerted when CVE-2006-0488 or the next vulnerability affects your stack