Vulnerabilities > Microsoft > Windows 2003 Server > r2

DATE CVE VULNERABILITY TITLE RISK
2005-08-10 CVE-2005-1981 Unspecified vulnerability in Microsoft Windows 2000 and Windows 2003 Server
Unknown vulnerability in Microsoft Windows 2000 Server and Windows Server 2003 domain controllers allows remote authenticated users to cause a denial of service (system crash) via a crafted Kerberos message.
local
low complexity
microsoft
2.1
2005-08-10 CVE-2005-1218 Remote Desktop Protocol Denial Of Service vulnerability in Microsoft Windows 2000, Windows 2003 Server and Windows XP
The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial of service (crash) via crafted Remote Desktop Protocol (RDP) requests.
network
low complexity
microsoft
5.0
2005-08-10 CVE-2005-0058 Buffer Overflow vulnerability in Microsoft Windows Telephony Service
Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.
network
low complexity
microsoft
7.5
2005-06-14 CVE-2005-1214 Unspecified vulnerability in Microsoft products
Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a malicious Web page.
network
high complexity
microsoft
5.1
2005-06-14 CVE-2005-1212 Buffer Overflow vulnerability in Microsoft Step-By-Step Interactive Training Bookmark Link
Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.
network
low complexity
microsoft
7.5
2005-06-14 CVE-2005-1208 Remote Code Execution vulnerability in Microsoft Windows HTML Help
Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
network
low complexity
microsoft
critical
10.0
2005-06-14 CVE-2005-1207 Unspecified vulnerability in Microsoft Windows 2003 Server and Windows XP
Buffer overflow in the Web Client service in Microsoft Windows XP and Windows Server 2003 allows remote authenticated users to execute arbitrary code via a crafted WebDAV request containing special parameters.
local
low complexity
microsoft
7.2
2005-06-14 CVE-2005-1206 Unspecified vulnerability in Microsoft Windows 2000, Windows 2003 Server and Windows XP
Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."
network
low complexity
microsoft
7.5
2005-06-14 CVE-2005-1205 Remote Information Disclosure vulnerability in Multiple Vendor Telnet Client
The Telnet client for Microsoft Windows XP, Windows Server 2003, and Windows Services for UNIX allows remote attackers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.
network
low complexity
microsoft
5.0
2005-06-13 CVE-2005-1935 Remote Security vulnerability in Windows NT Terminal Server
Heap-based buffer overflow in the BERDecBitString function in Microsoft ASN.1 library (MSASN1.DLL) allows remote attackers to execute arbitrary code via nested constructed bit strings, which leads to a realloc of a non-null pointer and causes the function to overwrite previously freed memory, as demonstrated using a SPNEGO token with a constructed bit string during HTTP authentication, and a different vulnerability than CVE-2003-0818.
network
low complexity
microsoft
7.5