CVE-2003-0813

medium · 5.1

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

5.1

CVSS

17.0%

EPSS (exploit prob.)

97th

EPSS percentile

2003-11-17

Published

AV:N/AC:H/Au:N/C:P/I:P/A:P

Weaknesses

CWE-367

Affected products

Vendor	Product	Affected versions
microsoft	windows_2000	all versions
microsoft	windows_2000	all versions
microsoft	windows_2000	all versions
microsoft	windows_98	all versions
microsoft	windows_nt	4.0
microsoft	windows_nt	4.0
microsoft	windows_server_2003	all versions
microsoft	windows_server_2003	all versions
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2003-0813