CVE-2003-0660 — Microsoft Windows 2003 Server vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
29.8%
top 3.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Windows 2003 ServerMicrosoft Windows NT
Timeline
PublishedNov 17
Latest updateApr 29

Description

The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

Patches

Patch: www.kb.cert.org ↗Patch: www.securityfocus.com ↗Patch: www.kb.cert.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-prj5-hr6w-gvq6: The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the sys↗2022-04-29
▶
CVEList
CVE-2003-0660: The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the sys↗2003-10-17
▶
CVE-2003-0660 — Microsoft vulnerability | cvebase