CVE-2004-0118

The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.

• http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html
• http://www.ciac.org/ciac/bulletins/o-114.shtml
• http://www.eeye.com/html/Research/Advisories/AD20040413E.htmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/783748Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/10117
• http://www.us-cert.gov/cas/techalerts/TA04-104A.htmlThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15714
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-April/020070.html
• http://www.ciac.org/ciac/bulletins/o-114.shtml
• http://www.eeye.com/html/Research/Advisories/AD20040413E.htmlPatch, Vendor Advisory
• http://www.kb.cert.org/vuls/id/783748Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/10117
• http://www.us-cert.gov/cas/techalerts/TA04-104A.htmlThird Party Advisory, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15714
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1512
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1718

Published

Jun 1, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0112The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and …
• CVE-2004-0113Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 befor…
• CVE-2004-0114The shmat system call in the System V Shared Memory interfac…
• CVE-2004-0115VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 throu…
• CVE-2004-0116An Activation function in the RPCSS Service involved with DC…
• CVE-2004-0117Unknown vulnerability in the H.323 protocol implementation i…
• CVE-2004-0119The Negotiate Security Software Provider (SSP) interface in …7.5
• CVE-2004-0120The Microsoft Secure Sockets Layer (SSL) library, as used in…
• CVE-2004-0121Argument injection vulnerability in Microsoft Outlook 2002 d…
• CVE-2004-0122Microsoft MSN Messenger 6.0 and 6.1 does not properly handle…
• CVE-2004-0123Double free vulnerability in the ASN.1 library as used in Wi…
• CVE-2004-0124The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, X…