SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2006-0488

The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by…

LOW 2.1EPSS 2.11%

Does this matter?

Lower severity and a low EPSS score (2.11%). Track it; it rarely justifies an emergency change on its own.

Description

The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm.

CVSS 2.0
2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
EPSS
2.11% probability · 81th percentile
CISA KEV
Not listed
Affected
microsoft/windows 2000 · microsoft/windows 2003 server · microsoft/windows xp
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.