GCVE - cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_2003_server:*:r2:x64:*:*:*:*:*

part: o version: * update: r2

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows 2003 Server (`4e1b015d-7054-5cfc-afa2-31769d6028d9`)
Edition	x64
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-0654`	vulnerable	2026-06-08 04:56:38.500856	Details available Integer underflow in the BowserWriteErrorLogEntry function in the Common Internet File System (CIFS) browser service in Mrxsmb.sys or bowser.sys in Active Directory in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a malformed BROWSER ELECTION message, leading to a heap-based buffer overflow, aka "Browser Pool Corruption Vulnerability." NOTE: some of these details are obtained from third party information. Published: 2011-02-16T00:00:00.000Z Updated: 2024-08-06T21:58:26.079Z Open on db.gcve.eu Reference links http://blogs.technet.com/b/mmpc/archive/2011/02/16/my-sweet-valentine-the-cifs-browser-protocol-heap-corruption-vulnerability.aspx http://www.us-cert.gov/cas/techalerts/TA11-102A.html http://www.kb.cert.org/vuls/id/323172 http://www.exploit-db.com/exploits/16166 http://www.vupen.com/english/advisories/2011/0394	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1735`	vulnerable	2026-06-08 04:54:10.147192	Details available The SfnLOGONNOTIFY function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x4c value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:53.707Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39630 http://secunia.com/advisories/39456 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 http://www.securityfocus.com/archive/1/510884/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1734`	vulnerable	2026-06-08 04:54:10.123075	Details available The SfnINSTRING function in win32k.sys in the kernel in Microsoft Windows 2000, XP, and Server 2003 allows local users to cause a denial of service (system crash) via a 0x18d value in the second argument (aka the Msg argument) of a PostMessage function call for the DDEMLEvent window. Published: 2010-05-05T18:00:00.000Z Updated: 2024-08-07T01:35:53.569Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/39631 http://secunia.com/advisories/39456 http://vigilance.fr/vulnerability/Windows-denials-of-service-of-win32k-sys-9607 http://www.securityfocus.com/archive/1/510886/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5133`	vulnerable	2026-06-08 04:49:57.946162	Details available Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain PNG file with a large tEXt chunk that possibly triggers an integer overflow in PNG chunk size handling, as demonstrated by badlycrafted.png. Published: 2007-09-27T19:00:00.000Z Updated: 2024-08-07T15:17:28.339Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/480594/100/0/threaded http://www.securityfocus.com/archive/1/480854/100/0/threaded http://www.securityfocus.com/archive/1/480706/100/0/threaded http://www.securityfocus.com/archive/1/480827/100/0/threaded http://www.securityfocus.com/bid/25816	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0825`	vulnerable	2026-06-08 04:47:22.635517	Details available The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T02:05:12.568Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/15037 http://www.ciac.org/ciac/bulletins/o-077.shtml http://www.osvdb.org/3903 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A801 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A800	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.