W2
Product
Windows 2003 Server
On CISA KEVExploited in the wildRansomware-linked
404
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 27Medium 4Low 0
Watch
Add Windows 2003 Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-1748 | – | Apr 13 | Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2… Affected: sp1; sp1; sp1; sp2; sp2; sp2 |
| CVE-2007-1912 | – | Apr 10 | Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file Affected: All versions, or not specified |
| CVE-2007-1206 | – | Apr 10 | The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses… Affected: gold; sp1; sp2 |
| CVE-2007-1205 | – | Apr 10 | Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute… Affected: gold; gold; sp1; sp1; sp1; sp2; +2 more |
| CVE-2007-1215 | – | Apr 4 | Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via… Affected: gold; gold; gold; sp1; sp1; sp2; +2 more |
| CVE-2007-1212 | – | Apr 4 | Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via a… Affected: gold; gold; gold; sp1; sp1; sp2; +2 more |
| CVE-2007-1211 | – | Apr 4 | Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service… Affected: gold; gold; gold; sp1; sp1; sp2; +2 more |
| CVE-2007-0038 | – | Mar 30 | Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service… Affected: gold; gold; gold; sp1; sp1; sp2; +2 more |
| CVE-2007-1765 | – | Mar 30 | Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a… Affected: All versions, or not specified |
| CVE-2007-1692 | – | Mar 26 | The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might allow remote attackers to intercept web… Affected: 2000; r2 |
| CVE-2007-1537 | – | Mar 20 | \Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as… Affected: sp1 |
| CVE-2007-0843 | – | Feb 23 | The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, which allows local users to bypass… Affected: All versions, or not specified |
| CVE-2007-0214 | – | Feb 13 | The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified… Affected: 64-bit; itanium; sp1; sp1 |
| CVE-2007-0211 | – | Feb 13 | The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an… Affected: sp1 |
| CVE-2007-0026 | – | Feb 13 | The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE… Affected: sp1 |
| CVE-2007-0025 | – | Feb 13 | The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user-assisted remote attackers to execute… Affected: 2000; 2003; xp_sp2 |
| CVE-2006-1311 | – | Feb 13 | The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft… Affected: sp1 |
| CVE-2006-6902 | – | Dec 31 | Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrative access (aka Remote Root) via… Affected: mobile_pocket_pc |
| CVE-2006-6901 | – | Dec 31 | Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to gain administrative access (aka Remote Root) via unspecified vectors Affected: r2 |
| CVE-2006-6696 | – | Dec 22 | Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION… Affected: datacenter_edition; datacenter_edition; datacenter_edition; enterprise_edition; enterprise_edition; sp1; +6 more |
| CVE-2006-5585 | – | Dec 13 | The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File… Affected: itanium; r2 |
| CVE-2006-4702 | – | Dec 13 | Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to… Affected: gold; sp1 |
| CVE-2006-5583 | – | Dec 12 | Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary… Affected: 2000; sp1; xp_sp2 |
| CVE-2006-4689 | – | Nov 14 | Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause… Affected: sp1 |
| CVE-2006-4688 | – | Nov 14 | Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted… Affected: sp1 |
| CVE-2006-3445 | – | Nov 14 | Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to… Affected: 64-bit; itanium; r2; sp1; sp1 |
| CVE-2006-4696 | – | Oct 10 | Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary… Affected: r2; sp1 |
| CVE-2006-3873 | – | Sep 12 | Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers… Affected: 64-bit; itanium; r2; sp1; sp1 |
| CVE-2006-0032 | – | Sep 12 | Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote… Affected: datacenter_edition; datacenter_edition; datacenter_edition; datacenter_edition_itanium; datacenter_edition_itanium; datacenter_edition_itanium; +15 more |
| CVE-2006-4495 | – | Aug 31 | Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000… Affected: 2000_server; 2000_server; 2000_server; 2000_server; 2000_server; advanced_server; +14 more |
| CVE-2006-4071 | – | Aug 10 | Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows… Affected: r2; sp1 |
| CVE-2006-3648 | – | Aug 9 | Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors… Affected: r2; sp1 |
| CVE-2006-3441 | – | Aug 9 | Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record… Affected: 64-bit; sp1; sp1 |
| CVE-2006-3440 | – | Aug 9 | Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka… Affected: 64-bit; sp1; sp1 |
| CVE-2006-3439 | – | Aug 9 | Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary… Affected: 64-bit; itanium; r2; sp1; sp1 |
| CVE-2006-3942 | – | Jul 31 | The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION… Affected: 64-bit; itanium; r2; sp1; sp1 |
| CVE-2006-3880 | – | Jul 27 | Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Small Business Server 2003 allow remote attackers to cause a denial of service (IP stack hang) via a continuous… Affected: datacenter_edition; datacenter_edition; datacenter_edition_64-bit; datacenter_edition_64-bit; enterprise_64-bit; enterprise_edition; +8 more |
| CVE-2006-1314 | – | Jul 11 | Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers… Affected: 64-bit; itanium; r2; sp1; sp1 |
| CVE-2006-3351 | – | Jul 6 | Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute… Affected: 3.1.0.3270; 64-bit; datacenter_64-bit; datacenter_64-bit; datacenter_edition; datacenter_edition; +32 more |
| CVE-2006-2379 | – | Jun 13 | Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via… Affected: datacenter_64-bit; enterprise; enterprise; enterprise_64-bit; enterprise_64-bit; r2; +7 more |
| CVE-2006-2378 | – | Jun 13 | Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers… Affected: datacenter_edition; datacenter_edition; datacenter_edition_64-bit; datacenter_edition_64-bit; enterprise_64-bit; enterprise_edition; +9 more |
| CVE-2006-2371 | – | Jun 13 | Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote… Affected: datacenter_edition; datacenter_edition; datacenter_edition_64-bit; datacenter_edition_64-bit; enterprise_64-bit; enterprise_edition; +9 more |
| CVE-2006-2370 | – | Jun 13 | Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or… Affected: datacenter_edition; datacenter_edition; datacenter_edition_64-bit; datacenter_edition_64-bit; enterprise_64-bit; enterprise_edition; +9 more |
| CVE-2006-1313 | – | Jun 13 | Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which… Affected: datacenter_edition; datacenter_edition; datacenter_edition_64-bit; datacenter_edition_64-bit; enterprise_64-bit; enterprise_edition; +9 more |
| CVE-2006-1184 | – | May 10 | Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0, 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to cause a denial of service (crash)… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2006-0034 | – | May 10 | Heap-based buffer overflow in the CRpcIoManagerServer::BuildContext function in msdtcprx.dll for Microsoft Distributed Transaction Coordinator (MSDTC) for Windows NT 4.0 and… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2006-0012 | – | Apr 12 | Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack… Affected: datacenter_64-bit; enterprise; enterprise; enterprise_64-bit; enterprise_64-bit; r2; +7 more |
| CVE-2006-1591 | – | Apr 3 | Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file Affected: enterprise; enterprise; r2; r2; standard; standard; +2 more |
| CVE-2006-0988 | – | Mar 3 | The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and… Affected: r2 |
| CVE-2006-0006 | – | Feb 14 | Heap-based buffer overflow in the bitmap processing routine in Microsoft Windows Media Player 7.1 on Windows 2000 SP4, Media Player 9 on Windows 2000 SP4 and XP SP1, and Media… Affected: r2 |