Lucene search

K
nvd[email protected]NVD:CVE-2002-2401
HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-2401

2002-12-3105:00:00
CWE-264
web.nvd.nist.gov
6

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

AI Score

7

Confidence

High

EPSS

0

Percentile

10.7%

NT Virtual DOS Machine (NTVDM.EXE) in Windows 2000, NT and XP does not verify user execution permissions for 16-bit executable files, which allows local users to bypass the loader and execute arbitrary programs.

Affected configurations

Nvd
Node
microsoftwindows_2000
OR
microsoftwindows_2000sp1
OR
microsoftwindows_2000sp2
OR
microsoftwindows_2000sp3
OR
microsoftwindows_ntMatch4.0
OR
microsoftwindows_ntMatch4.0workstation
OR
microsoftwindows_ntMatch4.0sp1enterprise
OR
microsoftwindows_ntMatch4.0sp1server
OR
microsoftwindows_ntMatch4.0sp1terminal_srv
OR
microsoftwindows_ntMatch4.0sp1workstation
OR
microsoftwindows_ntMatch4.0sp2enterprise
OR
microsoftwindows_ntMatch4.0sp2server
OR
microsoftwindows_ntMatch4.0sp2terminal_srv
OR
microsoftwindows_ntMatch4.0sp2workstation
OR
microsoftwindows_ntMatch4.0sp3enterprise
OR
microsoftwindows_ntMatch4.0sp3server
OR
microsoftwindows_ntMatch4.0sp3terminal_srv
OR
microsoftwindows_ntMatch4.0sp3workstation
OR
microsoftwindows_ntMatch4.0sp4enterprise
OR
microsoftwindows_ntMatch4.0sp4server
OR
microsoftwindows_ntMatch4.0sp4terminal_srv
OR
microsoftwindows_ntMatch4.0sp4workstation
OR
microsoftwindows_ntMatch4.0sp5enterprise
OR
microsoftwindows_ntMatch4.0sp5server
OR
microsoftwindows_ntMatch4.0sp5terminal_srv
OR
microsoftwindows_ntMatch4.0sp5workstation
OR
microsoftwindows_ntMatch4.0sp6enterprise
OR
microsoftwindows_ntMatch4.0sp6server
OR
microsoftwindows_ntMatch4.0sp6terminal_srv
OR
microsoftwindows_ntMatch4.0sp6workstation
OR
microsoftwindows_ntMatch4.0sp6aenterprise
OR
microsoftwindows_ntMatch4.0sp6aserver
OR
microsoftwindows_ntMatch4.0sp6aworkstation
OR
microsoftwindows_xphome
OR
microsoftwindows_xppro
OR
microsoftwindows_xpsp1home
OR
microsoftwindows_xpsp1pro
VendorProductVersionCPE
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:*:*:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:*:workstation:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp1:enterprise:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp1:server:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp1:terminal_srv:*:*:*:*:*
microsoftwindows_nt4.0cpe:2.3:o:microsoft:windows_nt:4.0:sp1:workstation:*:*:*:*:*
Rows per page:
1-10 of 371

CVSS2

3.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:P/A:N

AI Score

7

Confidence

High

EPSS

0

Percentile

10.7%

Related for NVD:CVE-2002-2401