First published: Wed Feb 01 2006(Updated: )
The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows 2000 | ||
Microsoft Windows Server 2003 | =r2 | |
Microsoft Windows XP | =sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-0488 has a moderate severity rating due to the potential exposure of sensitive information.
To address CVE-2006-0488, it is recommended to upgrade to a version of Windows beyond those affected or apply any available security patches.
CVE-2006-0488 affects Microsoft Windows 2000, Windows XP SP2, and Windows Server 2003 R2.
CVE-2006-0488 allows local users to read the first megabyte of memory, which may contain sensitive information.
CVE-2006-0488 requires local access, making it not exploitable remotely.