Microsoft

Windows Server 2003

455 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.9

CVE-2009-1922

  • EPSS 1.35%
  • Veröffentlicht 12.08.2009 17:30:00
  • Zuletzt bearbeitet 16.06.2026 23:08:22

The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users ...

10

CVE-2009-2494

  • EPSS 42.33%
  • Veröffentlicht 12.08.2009 17:30:00
  • Zuletzt bearbeitet 16.06.2026 23:09:34

The Active Template Library (ATL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via vectors related to erroneous free operation...

4.6

CVE-2009-2653

Exploit
  • EPSS 5.93%
  • Veröffentlicht 03.08.2009 14:30:00
  • Zuletzt bearbeitet 16.06.2026 23:09:55

The NtUserConsoleControl function in win32k.sys in Microsoft Windows XP SP2 and SP3, and Server 2003 before SP1, allows local administrators to bypass unspecified "security software" and gain privileges via a crafted call that triggers an overwrite o...

9.3

CVE-2009-1919

  • EPSS 34.04%
  • Veröffentlicht 29.07.2009 17:30:01
  • Zuletzt bearbeitet 16.06.2026 23:08:21

Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do n...

9.3

CVE-2009-0231

  • EPSS 37.45%
  • Veröffentlicht 15.07.2009 15:30:01
  • Zuletzt bearbeitet 16.06.2026 23:04:33

The Embedded OpenType (EOT) Font Engine (T2EMBED.DLL) in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name table in...

9.3

CVE-2009-0232

  • EPSS 25.82%
  • Veröffentlicht 15.07.2009 15:30:01
  • Zuletzt bearbeitet 16.06.2026 23:04:33

Integer overflow in the Embedded OpenType (EOT) Font Engine in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted name ta...

9.3

CVE-2009-1538

  • EPSS 26.82%
  • Veröffentlicht 15.07.2009 15:30:01
  • Zuletzt bearbeitet 16.06.2026 23:07:29

The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 performs updates to pointers without properly validating unspecified data val...

9.3

CVE-2009-1539

  • EPSS 25.82%
  • Veröffentlicht 15.07.2009 15:30:01
  • Zuletzt bearbeitet 16.06.2026 23:07:29

The QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 does not properly validate unspecified size fields in QuickTime media files, ...

7.8

CVE-2009-1123

Warnung
  • EPSS 4.92%
  • Veröffentlicht 10.06.2009 18:30:00
  • Zuletzt bearbeitet 16.06.2026 23:06:33

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted appli...

7.2

CVE-2009-1124

  • EPSS 1.44%
  • Veröffentlicht 10.06.2009 18:30:00
  • Zuletzt bearbeitet 16.06.2026 23:06:33

The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a ...