WS
Product
Windows Server 2003
On CISA KEVExploited in the wild
455
CVEs
17
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 63Medium 2Low 0
Watch
Add Windows Server 2003 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-1735 | – | May 6 | The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c… Affected: All versions, or not specified |
| CVE-2010-1734 | – | May 6 | The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d… Affected: All versions, or not specified |
| CVE-2010-0812 | – | Apr 14 | Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to bypass intended IPv4 source-address… Affected: All versions, or not specified |
| CVE-2010-0487 | – | Apr 14 | The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and… Affected: All versions, or not specified |
| CVE-2010-0486 | – | Apr 14 | The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista… Affected: All versions, or not specified |
| CVE-2010-0480 | – | Apr 14 | Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008… Affected: All versions, or not specified |
| CVE-2010-0476 | – | Apr 14 | The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to… Affected: All versions, or not specified |
| CVE-2010-0269 | – | Apr 14 | The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows… Affected: All versions, or not specified |
| CVE-2010-0238 | – | Apr 14 | Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a… Affected: All versions, or not specified |
| CVE-2010-0236 | – | Apr 14 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link… Affected: All versions, or not specified |
| CVE-2010-0235 | – | Apr 14 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows… Affected: All versions, or not specified |
| CVE-2010-0234 | – | Apr 14 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key… Affected: All versions, or not specified |
| CVE-2010-0025 | – | Apr 14 | The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate… Affected: All versions, or not specified |
| CVE-2010-0024 | – | Apr 14 | The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX… Affected: All versions, or not specified |
| CVE-2010-0807 | – | Mar 31 | Microsoft Internet Explorer 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, leading to memory… Affected: All versions, or not specified |
| CVE-2010-0494 | – | Mar 31 | Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site… Affected: All versions, or not specified |
| CVE-2010-0491 | – | Mar 31 | Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML… Affected: All versions, or not specified |
| CVE-2010-0490 | – | Mar 31 | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1)… Affected: All versions, or not specified |
| CVE-2010-0489 | – | Mar 31 | Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory… Affected: All versions, or not specified |
| CVE-2010-0267 | – | Mar 31 | Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was… Affected: All versions, or not specified |
| CVE-2010-0917 | – | Mar 3 | Stack-based buffer overflow in VBScript in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, might allow user-assisted remote… Affected: All versions, or not specified |
| CVE-2010-0483 | – | Mar 3 | vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote… Affected: All versions, or not specified |
| CVE-2010-0233 | – | Feb 10 | Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users… Affected: All versions, or not specified |
| CVE-2010-0035 | – | Feb 10 | The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos… Affected: All versions, or not specified |
| CVE-2010-0028 | – | Feb 10 | Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka… Affected: All versions, or not specified |
| CVE-2010-0016 | – | Feb 10 | The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and… Affected: All versions, or not specified |
| CVE-2010-0555 | – | Feb 4 | Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended… Affected: All versions, or not specified |
| CVE-2010-0027 | – | Jan 22 | The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003… Affected: All versions, or not specified |
| CVE-2009-3677 | – | Dec 9 | The Internet Authentication Service (IAS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold and SP1, and Server 2008 Gold does not properly verify the… Affected: All versions, or not specified |
| CVE-2009-3674 | – | Dec 9 | Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly… Affected: All versions, or not specified |
| CVE-2009-3673 | – | Dec 9 | Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not… Affected: All versions, or not specified |
| CVE-2009-2509 | – | Dec 9 | Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly validate headers in HTTP requests, which allows… Affected: All versions, or not specified |
| CVE-2009-2508 | – | Dec 9 | The single sign-on implementation in Active Directory Federation Services (ADFS) in Microsoft Windows Server 2003 SP2 and Server 2008 Gold and SP2 does not properly remove… Affected: All versions, or not specified |
| CVE-2009-2506 | – | Dec 9 | Integer overflow in the text converters in Microsoft Office Word 2002 SP3 and 2003 SP3; Works 8.5; Office Converter Pack; and WordPad in Windows 2000 SP4, XP SP2 and SP3, and… Affected: All versions, or not specified |
| CVE-2009-2531 | – | Oct 14 | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1)… Affected: All versions, or not specified |
| CVE-2009-2530 | – | Oct 14 | Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1)… Affected: All versions, or not specified |
| CVE-2009-2525 | – | Oct 14 | Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly initialize… Affected: All versions, or not specified |
| CVE-2009-2517 | – | Oct 14 | The kernel in Microsoft Windows Server 2003 SP2 does not properly handle unspecified exceptions when an error condition occurs, which allows local users to cause a denial of… Affected: All versions, or not specified |
| CVE-2009-2515 | – | Oct 14 | Integer underflow in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain… Affected: All versions, or not specified |
| CVE-2009-2511 | – | Oct 14 | Integer overflow in the CryptoAPI component in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008… Affected: All versions, or not specified |
| CVE-2009-2497 | – | Oct 14 | The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0, 2.0 SP1, 2.0 SP2, 3.5, and 3.5 SP1, and Silverlight 2, does not properly handle interfaces, which allows remote… Affected: All versions, or not specified |
| CVE-2009-0555 | – | Oct 14 | Microsoft Windows Media Runtime, as used in DirectShow WMA Voice Codec, Windows Media Audio Voice Decoder, and Audio Compression Manager (ACM), does not properly process Advanced… Affected: All versions, or not specified |
| CVE-2009-0091 | – | Oct 14 | Microsoft .NET Framework 2.0, 2.0 SP1, and 3.5 does not properly enforce a certain type-equality constraint in .NET verifiable code, which allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2009-0090 | – | Oct 14 | Microsoft .NET Framework 1.0 SP3, 1.1 SP1, and 2.0 SP1 does not properly validate .NET verifiable code, which allows remote attackers to obtain unintended access to stack memory,… Affected: All versions, or not specified |
| CVE-2009-2519 | – | Sep 8 | The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers… Affected: All versions, or not specified |
| CVE-2009-2499 | – | Sep 8 | Microsoft Windows Media Format Runtime 9.0, 9.5, and 11; and Microsoft Media Foundation on Windows Vista Gold, SP1, and SP2 and Server 2008; allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2009-2498 | – | Sep 8 | Microsoft Windows Media Format Runtime 9.0, 9.5, and 11 and Windows Media Services 9.1 and 2008 do not properly parse malformed headers in Advanced Systems Format (ASF) files,… Affected: All versions, or not specified |
| CVE-2009-1926 | – | Sep 8 | Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP… Affected: All versions, or not specified |
| CVE-2009-1925 | – | Sep 8 | The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to… Affected: All versions, or not specified |
| CVE-2009-1920 | – | Sep 8 | The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly load decoded scripts into memory before… Affected: All versions, or not specified |