W2
Product
Windows 2003 Server
On CISA KEVExploited in the wildRansomware-linked
404
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 27Medium 4Low 0
Watch
Add Windows 2003 Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-2528 | – | Oct 14 | GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted… Affected: All versions, or not specified |
| CVE-2009-2524 | – | Oct 14 | Integer underflow in the NTLM authentication feature in the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,… Affected: All versions, or not specified |
| CVE-2009-2510 | – | Oct 14 | The CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2,… Affected: All versions, or not specified |
| CVE-2009-2507 | – | Oct 14 | A certain ActiveX control in the Indexing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly process URLs, which allows remote attackers… Affected: All versions, or not specified |
| CVE-2009-2504 | – | Oct 14 | Multiple integer overflows in unspecified APIs in GDI+ in Microsoft .NET Framework 1.1 SP1, .NET Framework 2.0 SP1 and SP2, Windows XP SP2 and SP3, Windows Server 2003 SP2, Vista… Affected: All versions, or not specified |
| CVE-2009-2503 | – | Oct 14 | GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Windows Server 2003 SP2, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office… Affected: All versions, or not specified |
| CVE-2009-2501 | – | Oct 14 | Heap-based buffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office… Affected: All versions, or not specified |
| CVE-2009-2500 | – | Oct 14 | Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project… Affected: All versions, or not specified |
| CVE-2009-1930 | – | Aug 12 | The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute… Affected: sp2; sp2; sp2 |
| CVE-2009-1929 | – | Aug 12 | Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1… Affected: sp2; sp2; sp2 |
| CVE-2009-1924 | – | Aug 12 | Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted… Affected: All versions, or not specified |
| CVE-2009-1923 | – | Aug 12 | Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2009-1546 | – | Aug 12 | Integer overflow in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows allows remote attackers to execute arbitrary code on a Windows 2000 SP4… Affected: sp2; sp2; sp2 |
| CVE-2009-1545 | – | Aug 12 | Unspecified vulnerability in Avifil32.dll in the Windows Media file handling functionality in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and… Affected: sp2; sp2; sp2 |
| CVE-2008-0020 | – | Jul 7 | Unspecified vulnerability in the Load method in the IPersistStreamInit interface in the Active Template Library (ATL), as used in the Microsoft Video ActiveX control in… Affected: All versions, or not specified |
| CVE-2009-0568 | – | Jun 10 | The RPC Marshalling Engine (aka NDR) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly maintain its… Affected: All versions, or not specified |
| CVE-2009-0230 | – | Jun 10 | The Windows Print Spooler in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows remote authenticated users to gain… Affected: All versions, or not specified |
| CVE-2009-0229 | – | Jun 10 | The Windows Printing Service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 allows local users to read arbitrary… Affected: sp2; sp2; sp2 |
| CVE-2008-6819 | – | Jun 1 | win32k.sys in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (system crash) via vectors related to CreateWindow, TranslateMessage, and… Affected: All versions, or not specified |
| CVE-2009-0235 | – | Apr 15 | Stack-based buffer overflow in the Word 97 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2009-0087 | – | Apr 15 | Unspecified vulnerability in the Word 6 text converter in WordPad in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and the Word 6 text converter in… Affected: All versions, or not specified |
| CVE-2008-2249 | – | Dec 10 | Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2008-3464 | – | Oct 15 | afd.sys in the Ancillary Function Driver (AFD) component in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP1 and SP2 does not properly validate input sent from user… Affected: professional |
| CVE-2008-3008 | – | Sep 11 | Stack-based buffer overflow in the WMEncProfileManager ActiveX control in wmex.dll in Microsoft Windows Media Encoder 9 Series allows remote attackers to execute arbitrary code… Affected: All versions, or not specified |
| CVE-2008-1457 | – | Aug 13 | The Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate per-user subscriptions,… Affected: All versions, or not specified |
| CVE-2008-1456 | – | Aug 13 | Array index vulnerability in the Event System in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote… Affected: All versions, or not specified |
| CVE-2008-2245 | – | Aug 13 | Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS) in the Image Color Management (ICM)… Affected: All versions, or not specified |
| CVE-2008-1451 | – | Jun 12 | The WINS service on Microsoft Windows 2000 SP4, and Server 2003 SP1 and SP2, does not properly validate data structures in WINS network packets, which allows local users to gain… Affected: All versions, or not specified |
| CVE-2008-1445 | – | Jun 12 | Active Directory on Microsoft Windows 2000 Server SP4, XP Professional SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to cause a denial of… Affected: All versions, or not specified |
| CVE-2008-1087 | – | Apr 8 | Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an… Affected: All versions, or not specified |
| CVE-2008-1086 | – | Apr 8 | The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows… Affected: All versions, or not specified |
| CVE-2008-1084 | – | Apr 8 | Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 allows local users to execute arbitrary… Affected: All versions, or not specified |
| CVE-2008-0083 | – | Apr 8 | The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, do not… Affected: All versions, or not specified |
| CVE-2008-0088 | – | Feb 12 | Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote… Affected: sp1; sp2 |
| CVE-2007-5352 | – | Jan 8 | Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain… Affected: sp1; sp2 |
| CVE-2007-0069 | – | Jan 8 | Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of service (CPU consumption) and possibly… Affected: All versions, or not specified |
| CVE-2007-0066 | – | Jan 8 | The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via… Affected: All versions, or not specified |
| CVE-2007-6026 | – | Nov 20 | Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 SP3, allows user-assisted attackers to… Affected: All versions, or not specified |
| CVE-2007-3898 | – | Nov 14 | The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers… Affected: All versions, or not specified |
| CVE-2007-2228 | – | Oct 9 | rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista… Affected: All versions, or not specified |
| CVE-2007-5133 | – | Sep 27 | Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that… Affected: All versions, or not specified |
| CVE-2007-3036 | – | Sep 12 | Unspecified vulnerability in the (1) Windows Services for UNIX 3.0 and 3.5, and (2) Subsystem for UNIX-based Applications in Microsoft Windows 2000, XP, Server 2003, and Vista… Affected: All versions, or not specified |
| CVE-2007-3034 | – | Aug 14 | Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2007-0040 | – | Jul 10 | The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, and Server 2003 for Itanium-based… Affected: All versions, or not specified |
| CVE-2006-7210 | – | Jun 27 | Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with crafted (1) Width and (2) Height values in… Affected: All versions, or not specified |
| CVE-2007-2219 | – | Jun 12 | Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters… Affected: sp1; sp1; sp2; sp2 |
| CVE-2007-2218 | – | Jun 12 | Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary… Affected: sp1; sp2 |
| CVE-2007-3091 | – | Jun 6 | Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2… Affected: sp1; sp1; sp1; sp2; sp2; sp2 |
| CVE-2007-2999 | – | Jun 4 | Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for… Affected: gold; sp1; sp2 |
| CVE-2007-2374 | – | Apr 30 | Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via unspecified vectors Affected: datacenter; enterprise; enterprise; enterprise; enterprise; enterprise; +9 more |