GCVE - cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*

Approved changes feed: RSS · Atom

cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*

part: o version: - update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Windows Server 2003 (`750781cd-52fe-5df5-8a53-6f443919d93a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	x64
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4250`	vulnerable	2026-06-08 04:50:38.344944	Details available The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability." Published: 2008-10-23T21:00:00.000Z Updated: 2026-05-21T03:55:20.953Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=122703006921213&w=2 http://secunia.com/advisories/32326 http://www.kb.cert.org/vuls/id/827267 http://www.securitytracker.com/id?1021091 https://www.exploit-db.com/exploits/7132	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3475`	not_vulnerable	2026-06-08 04:50:34.825967	Details available Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory Corruption Vulnerability." Published: 2008-10-15T00:00:00.000Z Updated: 2024-08-07T09:37:27.036Z Open on db.gcve.eu Reference links http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13151 https://exchange.xforce.ibmcloud.com/vulnerabilities/45563 http://www.securityfocus.com/archive/1/497380/100/0/threaded http://marc.info/?l=bugtraq&m=122479227205998&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1447`	not_vulnerable	2026-06-08 04:50:20.553017	Details available The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka "DNS Insufficient Socket Entropy Vulnerability" or "the Kaminsky bug." Published: 2008-07-08T23:00:00.000Z Updated: 2024-08-07T08:24:42.012Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1020438 https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00402.html http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html http://www.kb.cert.org/vuls/id/800113 http://secunia.com/advisories/31137	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1441`	vulnerable	2026-06-08 04:50:20.527439	Details available Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability." Published: 2008-06-12T01:30:00.000Z Updated: 2024-08-07T08:24:41.541Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-036 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5604 http://www.vupen.com/english/advisories/2008/1783 http://www.us-cert.gov/cas/techalerts/TA08-162B.html http://secunia.com/advisories/30587	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6255`	vulnerable	2026-06-08 04:50:08.348616	Details available Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method. Published: 2008-04-23T10:00:00.000Z Updated: 2024-08-07T16:02:36.223Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/28882 http://osvdb.org/44652 https://exchange.xforce.ibmcloud.com/vulnerabilities/41940 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069 http://www.kb.cert.org/vuls/id/570089	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-1987`	vulnerable	2026-06-08 04:48:28.022747	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0978`	not_vulnerable	2026-06-08 04:47:52.166145	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0840`	vulnerable	2026-06-08 04:47:51.610261	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0230`	vulnerable	2026-06-08 04:47:49.116405	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.