WS
Product
Windows Server 2003
On CISA KEVExploited in the wild
455
CVEs
17
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 63Medium 2Low 0
Watch
Add Windows Server 2003 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-3020 | – | Aug 31 | win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted .eot file in the src descriptor of an… Affected: All versions, or not specified |
| CVE-2009-1922 | – | Aug 12 | The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user… Affected: All versions, or not specified |
| CVE-2009-1133 | – | Aug 12 | Heap-based buffer overflow in Microsoft Remote Desktop Connection (formerly Terminal Services Client) running RDP 5.0 through 6.1 on Windows, and Remote Desktop Connection Client… Affected: All versions, or not specified |
| CVE-2009-2653 | – | Aug 3 | The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security… Affected: All versions, or not specified |
| CVE-2009-1919 | – | Jul 29 | Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3,… Affected: All versions, or not specified |
| CVE-2009-1539 | – | Jul 15 | The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does… Affected: All versions, or not specified |
| CVE-2009-1538 | – | Jul 15 | The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2… Affected: All versions, or not specified |
| CVE-2009-0232 | – | Jul 15 | Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2… Affected: All versions, or not specified |
| CVE-2009-1126 | – | Jun 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop… Affected: All versions, or not specified |
| CVE-2009-1125 | – | Jun 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified… Affected: All versions, or not specified |
| CVE-2009-1124 | – | Jun 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in… Affected: All versions, or not specified |
| CVE-2009-1139 | – | Jun 10 | Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and… Affected: All versions, or not specified |
| CVE-2009-0550 | – | Apr 15 | Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008; and WinINet in Microsoft Internet… Affected: All versions, or not specified |
| CVE-2009-0089 | – | Apr 15 | Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Vista Gold allows remote web servers to impersonate arbitrary https… Affected: All versions, or not specified |
| CVE-2009-0088 | – | Apr 15 | The WordPerfect 6.x Converter (WPFT632.CNV, 1998.1.27.0) in Microsoft Office Word 2000 SP3 and Microsoft Office Converter Pack does not properly validate the length of an… Affected: All versions, or not specified |
| CVE-2009-0086 | – | Apr 15 | Integer underflow in Windows HTTP Services (aka WinHTTP) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote… Affected: All versions, or not specified |
| CVE-2009-0079 | – | Apr 15 | The RPCSS service in Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly implement isolation among a set of distinct processes that (1) all run under… Affected: All versions, or not specified |
| CVE-2009-0078 | – | Apr 15 | The Windows Management Instrumentation (WMI) provider in Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly implement… Affected: All versions, or not specified |
| CVE-2009-0234 | – | Mar 11 | The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 does not properly cache crafted DNS… Affected: All versions, or not specified |
| CVE-2009-0233 | – | Mar 11 | The DNS Resolver Cache Service (aka DNSCache) in Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does… Affected: All versions, or not specified |
| CVE-2009-0094 | – | Mar 11 | The WINS server in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 does not restrict registration of the (1) "wpad" and (2) "isatap" NetBIOS names, which allows remote… Affected: All versions, or not specified |
| CVE-2009-0093 | – | Mar 11 | Windows DNS Server in Microsoft Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008, when dynamic updates are enabled, does not restrict registration of the "wpad"… Affected: All versions, or not specified |
| CVE-2009-0085 | – | Mar 10 | The Secure Channel (aka SChannel) authentication component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008, when… Affected: All versions, or not specified |
| CVE-2009-0083 | – | Mar 10 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 does not properly handle invalid pointers, which allows local users to gain privileges via an… Affected: All versions, or not specified |
| CVE-2009-0081 | – | Mar 10 | The graphics device interface (GDI) implementation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does… Affected: All versions, or not specified |
| CVE-2009-0320 | – | Jan 28 | Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated… Affected: All versions, or not specified |
| CVE-2009-0243 | – | Jan 21 | Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1)… Affected: All versions, or not specified |
| CVE-2008-4834 | – | Jan 14 | Buffer overflow in SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via… Affected: All versions, or not specified |
| CVE-2008-2249 | – | Dec 10 | Integer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary… Affected: All versions, or not specified |
| CVE-2008-5044 | – | Nov 12 | Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to… Affected: All versions, or not specified |
| CVE-2008-4609 | – | Oct 20 | The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to… Affected: All versions, or not specified |
| CVE-2008-4038 | – | Oct 15 | Buffer underflow in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via… Affected: All versions, or not specified |
| CVE-2008-2252 | – | Oct 15 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate parameters sent from user mode to… Affected: All versions, or not specified |
| CVE-2008-2251 | – | Oct 15 | Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows local users to gain… Affected: All versions, or not specified |
| CVE-2008-2250 | – | Oct 15 | The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 does not properly validate window properties sent from a… Affected: All versions, or not specified |
| CVE-2008-4114 | – | Sep 16 | srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial… Affected: All versions, or not specified |
| CVE-2008-1454 | – | Jul 8 | Unspecified vulnerability in Microsoft DNS in Windows 2000 SP4, Server 2003 SP1 and SP2, and Server 2008 allows remote attackers to conduct cache poisoning attacks via unknown… Affected: All versions, or not specified |
| CVE-2008-1441 | – | Jun 12 | Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of… Affected: All versions, or not specified |
| CVE-2008-1440 | – | Jun 12 | Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast (PGM) packets, which allows remote… Affected: All versions, or not specified |
| CVE-2007-6255 | – | Apr 23 | Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method Affected: All versions, or not specified |
| CVE-2008-1436 | – | Apr 21 | Microsoft Windows XP Professional SP2, Vista, and Server 2003 and 2008 does not properly assign activities to the (1) NetworkService and (2) LocalService accounts, which might… Affected: All versions, or not specified |
| CVE-2007-0066 | – | Jan 8 | The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protocol (RDP) is enabled, allows remote attackers to cause a denial of service via… Affected: All versions, or not specified |
| CVE-2007-3898 | – | Nov 14 | The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers… Affected: All versions, or not specified |
| CVE-2007-5133 | – | Sep 27 | Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that… Affected: All versions, or not specified |
| CVE-2007-3034 | – | Aug 14 | Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute… Affected: All versions, or not specified |
| CVE-2006-4692 | – | Oct 10 | Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted… Affected: All versions, or not specified |
| CVE-2006-2373 | – | Jun 13 | The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by… Affected: All versions, or not specified |
| CVE-2006-0005 | – | Feb 14 | Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle… Affected: datacenter_sp1; enterprise_sp1; standard_sp1; web_edition_sp1 |
| CVE-2005-1987 | – | Oct 13 | Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or… Affected: r2; sp1; sp1 |
| CVE-2004-0574 | – | Nov 3 | The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003… Affected: r2 |