SP1 * * * : Security Vulnerabilities

Cpe Name:cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2008-0088	20	DoS	2008-02-12	2019-04-30	6.8	None	Remote	Low	???	None	None	Complete
Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003, and Active Directory Application Mode (ADAM) on XP and Server 2003, allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.
2	CVE-2007-5352	264	+Priv	2008-01-08	2018-10-15	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2 allows local users to gain privileges via a crafted local procedure call (LPC) request.
3	CVE-2007-2999			2007-06-04	2012-11-06	1.8	None	Local Network	High	Not required	Partial	None	None
Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login attempts with a valid user name than for those with an invalid user name, which allows context-dependent attackers to determine valid Active Directory account names.
4	CVE-2007-2219		Exec Code	2007-06-12	2018-10-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via certain parameters to an unspecified function.
5	CVE-2007-2218		DoS Exec Code	2007-06-12	2018-10-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allows remote servers to execute arbitrary code or cause a denial of service via crafted digital signatures that are processed during an SSL handshake.
6	CVE-2007-1748	119	Exec Code Overflow	2007-04-13	2019-04-30	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape sequences.
7	CVE-2007-1537		DoS	2007-03-20	2018-10-16	3.6	None	Local	Low	Not required	None	Partial	Partial
\Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions, which allows local users to write to the device and cause a denial of service, as demonstrated by using an IRQL to acquire a spinlock on paged memory via the NdisTapiDispatch function.
8	CVE-2007-1215		Overflow +Priv	2007-04-04	2018-10-16	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain "color-related parameters" in crafted images.
9	CVE-2007-1212		Overflow +Priv	2007-04-04	2018-10-16	6.6	None	Local	Medium	???	Complete	Complete	Complete
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via a crafted Enhanced Metafile (EMF) image format file.
10	CVE-2007-1211	399	DoS	2007-04-04	2018-10-16	7.1	None	Remote	Medium	Not required	None	None	Complete
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service (possibly persistent restart) via a crafted Windows Metafile (WMF) image that causes an invalid dereference of an offset in a kernel structure, a related issue to CVE-2005-4560.
11	CVE-2007-1206	264	+Priv	2007-04-10	2018-10-16	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions (PAGE_READWRITE) for a physical memory view, which allows local users to gain privileges by modifying the "zero page" during a race condition before the view is unmapped.
12	CVE-2007-1205		Exec Code Mem. Corr.	2007-04-10	2018-10-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 allows remote attackers to execute arbitrary code via crafted URLs, which result in memory corruption.
13	CVE-2007-0214		Exec Code	2007-02-13	2018-10-12	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.
14	CVE-2007-0211		+Priv	2007-02-13	2018-10-12	7.2	None	Local	Low	Not required	Complete	Complete	Complete
The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local users to gain privileges via an unvalidated parameter to a function related to the "detection and registration of new hardware."
15	CVE-2007-0038	119	DoS Exec Code Overflow Mem. Corr.	2007-03-30	2018-10-16	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI, cur, or .ico file, which results in memory corruption when processing cursors, animated cursors, and icons, a variant of CVE-2005-0416, as originally demonstrated using Internet Explorer 6 and 7. NOTE: this might be a duplicate of CVE-2007-1765; if so, then CVE-2007-0038 should be preferred.
16	CVE-2007-0026		Exec Code Mem. Corr.	2007-02-13	2018-10-12	7.6	None	Remote	High	Not required	Complete	Complete	Complete
The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code via an RTF file with a malformed OLE object that triggers memory corruption.
17	CVE-2006-5583		Exec Code Overflow Mem. Corr.	2006-12-12	2018-10-17	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary code via a crafted SNMP packet, aka "SNMP Memory Corruption Vulnerability."
18	CVE-2006-4702		Exec Code Overflow	2006-12-13	2018-10-17	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file.
19	CVE-2006-4696	94	Exec Code	2006-10-10	2018-10-17	9.0	None	Remote	Low	???	Complete	Complete	Complete
Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability."
20	CVE-2006-4692	94	Exec Code	2006-10-10	2018-10-17	5.1	None	Remote	High	Not required	Partial	Partial	Partial
Argument injection vulnerability in the Windows Object Packager (packager.exe) in Microsoft Windows XP SP1 and SP2 and Server 2003 SP1 and earlier allows remote user-assisted attackers to execute arbitrary commands via a crafted file with a "/" (slash) character in the filename of the Command Line property, followed by a valid file extension, which causes the command before the slash to be executed, aka "Object Packager Dialogue Spoofing Vulnerability."
21	CVE-2006-4689		DoS	2006-11-14	2018-10-17	5.0	None	Remote	Low	Not required	None	None	Partial
Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability."
22	CVE-2006-4688		Exec Code Overflow Mem. Corr.	2006-11-14	2018-10-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
23	CVE-2006-4071		DoS	2006-08-10	2018-10-17	2.6	None	Remote	High	Not required	None	None	Partial
Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
24	CVE-2006-3942	20	DoS	2006-07-31	2018-10-17	7.8	None	Remote	Low	Not required	None	None	Complete
The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability. NOTE: the name "Mailslot DOS" was derived from incomplete initial research; the vulnerability is not associated with a mailslot.
25	CVE-2006-3873		DoS Exec Code Overflow	2006-09-12	2018-10-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in URLMON.DLL in Microsoft Internet Explorer 6 SP1 on Windows 2000 and XP SP1, with versions the MS06-042 patch before 20060912, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long URL in a GZIP-encoded website that was the target of an HTTP redirect, due to an incomplete fix for CVE-2006-3869.
26	CVE-2006-3648		Exec Code	2006-08-09	2018-10-12	7.6	None	Remote	High	Not required	Complete	Complete	Complete
Unspecified vulnerability in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 and 2003 SP1, allows remote attackers to execute arbitrary code via unspecified vectors involving unhandled exceptions, memory resident applications, and incorrectly "unloading chained exception."
27	CVE-2006-3445	189	Exec Code Overflow	2006-11-14	2018-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
28	CVE-2006-3441		Exec Code Overflow	2006-08-09	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the DNS Client service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted record response. NOTE: while MS06-041 implies that there is a single issue, there are multiple vectors, and likely multiple vulnerabilities, related to (1) a heap-based buffer overflow in a DNS server response to the client, (2) a DNS server response with malformed ATMA records, and (3) a length miscalculation in TXT, HINFO, X25, and ISDN records.
29	CVE-2006-3440		Exec Code Overflow	2006-08-09	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the Winsock API in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka "Winsock Hostname Vulnerability."
30	CVE-2006-3439		Exec Code Overflow	2006-08-09	2018-10-12	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.
31	CVE-2006-3351		DoS Exec Code Overflow	2006-07-06	2018-10-18	5.4	None	Remote	High	Not required	None	None	Complete
Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.
32	CVE-2006-1314		Exec Code Overflow Mem. Corr. Bypass	2006-07-11	2018-10-18	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Heap-based buffer overflow in the Server Service (SRV.SYS driver) in Microsoft Windows 2000 SP4, XP SP1 and SP2, Server 2003 up to SP1, and other products, allows remote attackers to execute arbitrary code via crafted first-class Mailslot messages that triggers memory corruption and bypasses size restrictions on second-class Mailslot messages.
33	CVE-2006-1311		Exec Code Mem. Corr.	2007-02-13	2018-10-12	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and Learning Essentials for Microsoft Office 1.0, 1.1, and 1.5 allows user-assisted remote attackers to execute arbitrary code via a malformed OLE object in an RTF file, which triggers memory corruption.
34	CVE-2006-0020	189	DoS Exec Code Overflow Mem. Corr.	2006-01-10	2018-10-12	9.3	None	Remote	Medium	Not required	Complete	Complete	Complete
An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2000 SP4, and 5.5 SP2 on Windows Millennium, and possibly other versions, allows attackers to cause a denial of service (crash) and possibly execute code via a crafted WMF file with a manipulated WMF header size, possibly involving an integer overflow, a different vulnerability than CVE-2005-4560, and aka "WMF Image Parsing Memory Corruption Vulnerability."
35	CVE-2005-4717		DoS	2005-12-31	2021-07-23	5.0	None	Remote	Low	Not required	None	None	Partial
Microsoft Internet Explorer 6.0 on Windows NT 4.0 SP6a, Windows 2000 SP4, Windows XP SP1, Windows XP SP2, and Windows Server 2003 SP1 allows remote attackers to cause a denial of service (client crash) via a certain combination of a malformed HTML file and a CSS file that triggers a null dereference, probably related to rendering of a DIV element that contains a malformed IMG tag, as demonstrated by IEcrash.htm and IEcrash.rar.
36	CVE-2005-2765			2005-09-01	2008-09-05	2.1	None	Local	Low	Not required	None	Partial	None
The user interface in the Windows Firewall does not properly display certain malformed entries in the Windows Registry, which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the Windows Firewall interface to monitor exceptions. NOTE: the vendor disputes this issue, saying that since administrative privileges are already required, it is not a vulnerability. CVE has not yet formally decided if such "information hiding" issues should be included.
37	CVE-2005-2124		Exec Code Overflow	2005-11-29	2018-10-12	7.6	None	Remote	High	Not required	Complete	Complete	Complete
Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1, related to "An unchecked buffer" and possibly buffer overflows, allows remote attackers to execute arbitrary code via a crafted Windows Metafile (WMF) format image, aka "Windows Metafile Vulnerability."
38	CVE-2005-2123		Exec Code Overflow	2005-11-29	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allow remote attackers to execute arbitrary code via crafted Windows Metafile (WMF) and Enhanced Metafile (EMF) format images that lead to heap-based buffer overflows, as demonstrated using MRBP16::bCheckRecord.
39	CVE-2005-2119			2005-10-12	2018-10-12	5.0	None	Remote	Low	Not required	None	Partial	None
The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.
40	CVE-2005-1985		Exec Code	2005-10-13	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages.
41	CVE-2005-1980		DoS	2005-10-12	2018-10-12	5.0	None	Remote	Low	Not required	None	None	Partial
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafted Transaction Internet Protocol (TIP) message that causes DTC to repeatedly connect to a target IP and port number after an error occurs, aka the "Distributed TIP Vulnerability."
42	CVE-2005-1979		DoS	2005-10-12	2018-10-12	5.0	None	Remote	Low	Not required	None	None	Partial
Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality.
43	CVE-2005-1978		Exec Code	2005-10-12	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.
44	CVE-2005-1206		Exec Code Overflow	2005-06-14	2018-10-12	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the Server Message Block (SMB) functionality for Microsoft Windows 2000, XP SP1 and SP2, and Server 2003 and SP1 allows remote attackers to execute arbitrary code via unknown vectors, aka the "Server Message Block Vulnerability."

Total number of vulnerabilities : 44 Page : 1 (This Page)