Windows 2003 Server vulnerabilities | LiveThreat CVE Feed

Product

Windows 2003 Server

by Microsoft · last CVE Jul 14, 2015

On CISA KEVExploited in the wildRansomware-linked

404

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities404 In the news4 Timeline

Severity mix

Critical 2High 27Medium 4Low 0

Severity

All severities404 Critical2 High27 Medium4 Low0

Exploitation

On CISA KEV4 Exploited in the wild4

Watch

Add Windows 2003 Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2011-1226	–	1%	Apr 13	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and… Affected: All versions, or not specified
CVE-2011-1225	–	1%	Apr 13	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and… Affected: All versions, or not specified
CVE-2011-0677	–	1%	Apr 13	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and… Affected: All versions, or not specified
CVE-2011-0675	–	1%	Apr 13	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2011-0674	–	1%	Apr 13	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2011-0672	–	1%	Apr 13	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2010-3974	–	19%	Apr 13	fxscover.exe in the Fax Cover Page Editor in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1,… Affected: All versions, or not specified
CVE-2011-0041	–	28%	Apr 13	Integer overflow in gdiplus.dll in GDI+ in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold and SP2, and Office XP… Affected: All versions, or not specified
CVE-2011-0660	–	17%	Apr 13	The SMB client in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1… Affected: All versions, or not specified
CVE-2011-0661	–	45%	Apr 13	The SMB Server service in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold… Affected: All versions, or not specified
CVE-2011-0662	–	2%	Apr 13	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2011-0665	–	1%	Apr 13	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2011-0666	–	1%	Apr 13	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2011-0667	–	1%	Apr 13	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2011-0670	–	1%	Apr 13	Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2011-0034	–	28%	Apr 13	Stack-based buffer overflow in the OpenType Compact Font Format (aka OTF or CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2,… Affected: All versions, or not specified
CVE-2011-0654	–	68%	Feb 16	Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft… Affected: All versions, or not specified
CVE-2011-0033	–	21%	Feb 10	The OpenType Compact Font Format (CFF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and… Affected: All versions, or not specified
CVE-2011-0043	–	2%	Feb 10	Kerberos in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 supports weak hashing algorithms, which allows local users to gain privileges by operating a service that sends… Affected: All versions, or not specified
CVE-2011-0040	–	23%	Feb 9	The server in Microsoft Active Directory on Windows Server 2003 SP2 does not properly handle an update request for a service principal name (SPN), which allows remote attackers to… Affected: All versions, or not specified
CVE-2011-0088	–	2%	Feb 9	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7… Affected: All versions, or not specified
CVE-2011-0030	–	2%	Feb 9	The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to… Affected: All versions, or not specified
CVE-2011-0089	–	2%	Feb 9	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7… Affected: All versions, or not specified
CVE-2011-0090	–	2%	Feb 9	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7… Affected: All versions, or not specified
CVE-2011-0039	–	2%	Feb 9	The Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly process authentication requests, which allows… Affected: All versions, or not specified
CVE-2011-0087	–	2%	Feb 9	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 does not properly validate user-mode… Affected: All versions, or not specified
CVE-2011-0086	–	2%	Feb 9	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7… Affected: All versions, or not specified
CVE-2010-2743	–	15%	Jan 20	The kernel-mode drivers in Microsoft Windows XP SP3 do not properly perform indexing of a function-pointer table during the loading of keyboard layouts from disk, which allows… Affected: All versions, or not specified
CVE-2010-4701	–	48%	Jan 20	Heap-based buffer overflow in the CDrawPoly::Serialize function in fxscover.exe in Microsoft Windows Fax Services Cover Page Editor 5.2 r2 in Windows XP Professional SP3, Server… Affected: All versions, or not specified
CVE-2010-4669	–	29%	Jan 7	The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, and Windows 7 allows remote… Affected: All versions, or not specified
CVE-2010-3939	–	2%	Dec 16	Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2,… Affected: All versions, or not specified
CVE-2010-2742	–	29%	Dec 16	The Netlogon RPC Service in Microsoft Windows Server 2003 SP2 and Server 2008 Gold, SP2, and R2, when the domain controller role is enabled, allows remote attackers to cause a… Affected: All versions, or not specified
CVE-2010-3940	–	2%	Dec 16	Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008… Affected: All versions, or not specified
CVE-2010-3942	–	2%	Dec 16	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7… Affected: All versions, or not specified
CVE-2010-3943	–	2%	Dec 16	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7… Affected: All versions, or not specified
CVE-2010-3956	–	8%	Dec 16	The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does… Affected: All versions, or not specified
CVE-2010-3959	–	14%	Dec 16	The OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows… Affected: All versions, or not specified
CVE-2010-3963	–	2%	Dec 16	Buffer overflow in the Routing and Remote Access NDProxy component in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via… Affected: All versions, or not specified
CVE-2010-2746	–	36%	Oct 13	Heap-based buffer overflow in Comctl32.dll (aka the common control library) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server… Affected: All versions, or not specified
CVE-2010-2744	–	4%	Oct 13	The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 do not… Affected: All versions, or not specified
CVE-2010-2741	–	2%	Oct 13	The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 performs an incorrect integer calculation during font processing, which allows local… Affected: All versions, or not specified
CVE-2010-2740	–	2%	Oct 13	The OpenType Font (OTF) format driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly perform memory allocation during font parsing, which allows local… Affected: All versions, or not specified
CVE-2010-2739	–	4%	Sep 7	Buffer overflow in the CreateDIBPalette function in win32k.sys in Microsoft Windows XP SP3, Server 2003 R2 Enterprise SP2, Vista Business SP1, Windows 7, and Server 2008 SP2… Affected: All versions, or not specified
CVE-2010-3147	–	19%	Aug 27	Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2,… Affected: All versions, or not specified
CVE-2010-1886	–	1%	Aug 16	Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 SP2 and R2, and Windows 7 allow local users to gain privileges by… Affected: All versions, or not specified
CVE-2010-2566	–	15%	Aug 11	The Secure Channel (aka SChannel) security package in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, does not properly validate certificate request messages from… Affected: All versions, or not specified
CVE-2010-2550	–	76%	Aug 11	The SMB Server in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly… Affected: All versions, or not specified
CVE-2010-1897	–	3%	Aug 11	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and… Affected: All versions, or not specified
CVE-2010-1895	–	2%	Aug 11	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly perform memory allocation before copying user-mode… Affected: All versions, or not specified
CVE-2010-1894	–	3%	Aug 11	The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, do not properly handle unspecified exceptions, which allows local… Affected: All versions, or not specified