Microsoft

Windows Server 2003

455 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.4

CVE-2007-3898

Exploit
  • EPSS 55.13%
  • Veröffentlicht 14.11.2007 01:46:00
  • Zuletzt bearbeitet 16.06.2026 22:42:59

The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attac...

7.1

CVE-2007-5133

Exploit
  • EPSS 22.91%
  • Veröffentlicht 27.09.2007 19:17:00
  • Zuletzt bearbeitet 16.06.2026 22:45:30

Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as de...

9.3

CVE-2007-3034

  • EPSS 54.75%
  • Veröffentlicht 14.08.2007 21:17:00
  • Zuletzt bearbeitet 16.06.2026 22:40:55

Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length va...

5.1

CVE-2006-4692

  • EPSS 27.7%
  • Veröffentlicht 10.10.2006 22:07:00
  • Zuletzt bearbeitet 16.06.2026 22:29:36

Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slas...

10

CVE-2006-2373

  • EPSS 30.1%
  • Veröffentlicht 13.06.2006 19:06:00
  • Zuletzt bearbeitet 16.06.2026 22:24:52

The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEIT...

9.3

CVE-2006-0005

  • EPSS 43.86%
  • Veröffentlicht 14.02.2006 19:06:00
  • Zuletzt bearbeitet 16.06.2026 22:19:41

Buffer overflow in the plug-in for Microsoft Windows Media Player (WMP) 9 and 10, when used in browsers other than Internet Explorer and set as the default application to handle media files, allows remote attackers to execute arbitrary code via HTML ...

7.5

CVE-2005-1987

  • EPSS 43.45%
  • Veröffentlicht 13.10.2005 10:02:00
  • Zuletzt bearbeitet 16.06.2026 22:14:02

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstra...

10

CVE-2004-0574

  • EPSS 67.82%
  • Veröffentlicht 03.11.2004 05:00:00
  • Zuletzt bearbeitet 16.06.2026 22:05:54

The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, poss...

10

CVE-2004-0840

  • EPSS 30.29%
  • Veröffentlicht 03.11.2004 05:00:00
  • Zuletzt bearbeitet 16.06.2026 22:06:29

The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute ...

5

CVE-2004-0230

Exploit
  • EPSS 80.86%
  • Veröffentlicht 18.08.2004 04:00:00
  • Zuletzt bearbeitet 16.06.2026 22:05:12

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that u...