Vulnerabilities > Microsoft > Windows 2003 Server > r2

DATE CVE VULNERABILITY TITLE RISK
2004-08-06 CVE-2004-0202 Remote Malformed Packet Denial Of Service vulnerability in Microsoft DirectX DirectPlay
IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.
network
low complexity
microsoft
5.0
2004-08-06 CVE-2004-0201 Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.
network
low complexity
avaya microsoft
critical
10.0
2004-06-14 CVE-2004-0199 Unspecified vulnerability in Microsoft Windows 2003 Server and Windows XP
Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).
network
high complexity
microsoft
5.1
2004-06-01 CVE-2004-0124 Unspecified vulnerability in Microsoft products
The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."
network
high complexity
microsoft
2.6
2004-06-01 CVE-2004-0123 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Microsoft products
Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.
network
low complexity
microsoft CWE-119
7.5
2004-06-01 CVE-2004-0120 Denial of Service vulnerability in Microsoft Windows 2000, Windows 2003 Server and Windows XP
The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.
network
low complexity
microsoft
5.0
2004-06-01 CVE-2004-0117 Unspecified vulnerability in Microsoft products
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.
network
low complexity
microsoft
7.5
2004-06-01 CVE-2004-0116 Remote Denial Of Service vulnerability in Microsoft Windows 2000, Windows 2003 Server and Windows XP
An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.
network
low complexity
microsoft
5.0
2004-06-01 CVE-2003-0807 Remote Denial Of Service vulnerability in Microsoft Windows COM Internet Service/RPC Over HTTP
Buffer overflow in the COM Internet Services and in the RPC over HTTP Proxy components for Microsoft Windows NT Server 4.0, NT 4.0 Terminal Server Edition, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service via a crafted request.
network
low complexity
microsoft
5.0
2004-06-01 CVE-2003-0719 Unspecified vulnerability in Microsoft products
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
network
low complexity
microsoft
7.5