Windows contains a flaw that may allow a malicious user to gain access to unauthorized privileges. The issue is triggered when an attacker causes code to run in Virtual86 mode without first initializing a Virtual DOS Machine, which may allow the attacker to derefernce a null pointer and execute arbitrary code in kernel space. This flaw may lead to a loss of integrity.

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

• Secunia Advisory ID: 11064
• OVAL ID: 1512 1718
• ISS X-Force ID: 15714 15818
• CVE ID: 2004-0118 (see also: NVD)
• Related OSVDB ID: 5248 5249 5250 5251 5252 5253 5254 5255 5256 5257 5259 5260 5261
• SCIP VulDB ID: 608
• CERT VU: 783748
• Mail List Post: http://lists.netsys.com/pipermail/full-disclosure/2004-April/020070.html
• Other Advisory URL: http://research.eeye.com/html/advisories/published/AD20040413E.html
  http://www.eeye.com/html/Research/Advisories/AD20040413E.html [ Link is 404 ]
• Microsoft Security Bulletin: MS04-011
• CIAC Advisory: o-114
• US-CERT Cyber Security Alert: TA04-104A

• Derek Soeder - eEye Digital Security