Lucene search

[email protected]CVE-2003-0660

HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0660

2003-11-1705:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

authenticode

windows

server 2003

remote code execution

security vulnerability

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.104 Low

EPSS

Percentile

94.9%

JSON

The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.

CPENameOperatorVersion
microsoft:windows_ntmicrosoft windows nteq4.0
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard

CPE	Name	Operator	Version
microsoft:windows_nt	microsoft windows nt	eq	4.0
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard

References

www.cert.org/advisories/CA-2003-27.html

www.kb.cert.org/vuls/id/838572

www.securityfocus.com/bid/8830

docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-041

exchange.xforce.ibmcloud.com/vulnerabilities/13422

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A185

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A198

7.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.104 Low

EPSS

Percentile

94.9%

JSON

Related for CVE-2003-0660

cert1 securityvulns1 openvas2 nessus1