W2
Product
Windows 2003 Server
On CISA KEVExploited in the wildRansomware-linked
404
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 27Medium 4Low 0
Watch
Add Windows 2003 Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-0050 | – | May 2 | The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an "unchecked… Affected: 2000; 2003; enterprise; enterprise_64-bit; r2; r2; +2 more |
| CVE-2005-0047 | – | May 2 | Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2005-0045 | – | May 2 | The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2005-0044 | – | May 2 | The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2005-0416 | – | Apr 27 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allows remote attackers to execute arbitrary code… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2004-0790 | – | Apr 12 | Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind… Affected: r2 |
| CVE-2005-0688 | – | Mar 5 | Windows Server 2003 and XP SP2, with Windows Firewall turned off, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet with the SYN flag set and… Affected: r2 |
| CVE-2004-0892 | – | Jan 27 | Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers… Affected: 2000; 2003 |
| CVE-2004-0897 | – | Jan 11 | The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a… Affected: r2 |
| CVE-2004-1080 | – | Jan 10 | The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Server 2003 allows remote attackers to write to arbitrary memory locations and… Affected: 2000; 2003; enterprise; enterprise_64-bit; r2; r2; +2 more |
| CVE-2004-0901 | – | Jan 10 | Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2004-0894 | – | Jan 10 | LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to… Affected: datacenter_64-bit; enterprise; enterprise; enterprise_64-bit; enterprise_64-bit; r2; +6 more |
| CVE-2004-0893 | – | Jan 10 | The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of… Affected: datacenter_64-bit; enterprise; enterprise; enterprise_64-bit; enterprise_64-bit; r2; +6 more |
| CVE-2004-0571 | – | Jan 10 | Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2004-0568 | – | Jan 10 | HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file,… Affected: datacenter_64-bit; enterprise; enterprise; enterprise_64-bit; enterprise_64-bit; r2; +6 more |
| CVE-2004-2365 | – | Dec 31 | Memory leak in Microsoft Windows XP and Windows Server 2003 allows local users to cause a denial of service (memory exhaustion) by repeatedly creating and deleting directories… Affected: r2 |
| CVE-2004-1306 | – | Dec 31 | Heap-based buffer overflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via… Affected: datacenter_64-bit; enterprise; enterprise; enterprise_64-bit; enterprise_64-bit; r2; +6 more |
| CVE-2004-1049 | – | Dec 31 | Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large… Affected: r2 |
| CVE-2004-0567 | – | Dec 31 | The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly… Affected: 64-bit; r2 |
| CVE-2004-1361 | – | Dec 23 | Integer underflow in winhlp32.exe in Windows NT, Windows 2000 through SP4, Windows XP through SP2, and Windows 2003 allows remote attackers to execute arbitrary code via a… Affected: enterprise; enterprise; enterprise_64-bit; r2; r2; r2; +4 more |
| CVE-2004-1305 | – | Dec 23 | The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2004-1319 | – | Dec 15 | The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web script into other domains by setting a name for a window, opening a child page whose target is… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2004-0575 | – | Nov 3 | Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to… Affected: 64-bit; r2 |
| CVE-2004-0211 | – | Nov 3 | The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a… Affected: r2 |
| CVE-2004-0209 | – | Nov 3 | Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code… Affected: r2 |
| CVE-2004-0208 | – | Nov 3 | The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain… Affected: r2 |
| CVE-2004-0207 | – | Nov 3 | "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows… Affected: r2 |
| CVE-2004-0206 | – | Nov 3 | Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute… Affected: r2 |
| CVE-2004-0200 | – | Sep 28 | Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code… Affected: r2 |
| CVE-2004-0839 | – | Aug 18 | Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2004-0202 | – | Aug 6 | IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2004-0201 | – | Aug 6 | Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2004-0199 | – | Jun 14 | Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as… Affected: enterprise; enterprise_64-bit; r2; r2; r2; standard; +1 more |
| CVE-2004-0124 | – | Jun 1 | The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains… Affected: r2 |
| CVE-2004-0123 | – | Jun 1 | Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service… Affected: r2 |
| CVE-2004-0120 | – | Jun 1 | The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed… Affected: r2 |
| CVE-2004-0117 | – | Jun 1 | Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code Affected: r2 |
| CVE-2004-0116 | – | Jun 1 | An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory… Affected: r2 |
| CVE-2003-0807 | – | Jun 1 | Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server… Affected: r2 |
| CVE-2003-0719 | – | Jun 1 | Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4,… Affected: r2 |
| CVE-2003-0533 | – | Jun 1 | Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a,… Affected: r2 |
| CVE-2003-0825 | – | Mar 3 | The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets,… Affected: enterprise; enterprise_64-bit; r2; standard; web |
| CVE-2003-0818 | – | Mar 3 | Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2003-0839 | – | Nov 17 | Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via Affected: r2 |
| CVE-2003-0717 | – | Nov 17 | The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2003-0711 | – | Nov 17 | Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2003-0660 | – | Nov 17 | The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2003-0659 | – | Nov 17 | Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2003-0661 | – | Oct 20 | The NetBT Name Service (NBNS) for NetBIOS in Windows NT 4.0, 2000, XP, and Server 2003 may include random memory in a response to a NBNS query, which could allow remote attackers… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |
| CVE-2003-0715 | – | Sep 17 | Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC… Affected: enterprise; enterprise_64-bit; r2; r2; standard; web |