[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5tw-SKcKI_RG_udLKpD8gXdiR_OKlkCjNVLxYxVYqfE":3,"g5a-family:microsoft\u002Fwindows_2003_server":249,"g5a-ex:microsoft\u002Fwindows_2003_server@*":250},{"success":4,"data":5},true,{"product":6,"versions":99,"topVulnerabilitiesByEpss":132,"kevVulnerabilities":189,"seoMetadata":227,"meta":246},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":98},"microsoft","windows_2003_server",32,546,3,"2015-07-14",[14,19,22,25,27,30,32,34,36,39,42,45,47,49,52,55,57,59,61,64,67,69,71,73,76,79,82,85,88,91,94,96],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"2000",6,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"2000_server",1,{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},"2003",5,{"version":26,"cve_count":21,"kev_count":17,"has_kev":18},"3.1.0.3270",{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"64-bit",25,{"version":31,"cve_count":21,"kev_count":17,"has_kev":18},"64-bit_sp2",{"version":33,"cve_count":21,"kev_count":17,"has_kev":18},"advanced_server",{"version":35,"cve_count":21,"kev_count":17,"has_kev":18},"datacenter",{"version":37,"cve_count":38,"kev_count":17,"has_kev":18},"datacenter_64-bit",19,{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},"datacenter_edition",10,{"version":43,"cve_count":44,"kev_count":17,"has_kev":18},"datacenter_edition_64-bit",7,{"version":46,"cve_count":21,"kev_count":17,"has_kev":18},"datacenter_edition_itanium",{"version":48,"cve_count":21,"kev_count":17,"has_kev":18},"datacenter_server",{"version":50,"cve_count":51,"kev_count":17,"has_kev":18},"enterprise",59,{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},"enterprise_64-bit",57,{"version":56,"cve_count":41,"kev_count":17,"has_kev":18},"enterprise_edition",{"version":58,"cve_count":44,"kev_count":17,"has_kev":18},"enterprise_edition_64-bit",{"version":60,"cve_count":21,"kev_count":17,"has_kev":18},"enterprise_edition_itanium",{"version":62,"cve_count":63,"kev_count":17,"has_kev":18},"gold",13,{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},"itanium",16,{"version":68,"cve_count":21,"kev_count":17,"has_kev":18},"itanium_sp1",{"version":70,"cve_count":21,"kev_count":17,"has_kev":18},"itanium_sp2",{"version":72,"cve_count":21,"kev_count":17,"has_kev":18},"mobile_pocket_pc",{"version":74,"cve_count":75,"kev_count":17,"has_kev":18},"professional",2,{"version":77,"cve_count":78,"kev_count":21,"has_kev":4},"r2",140,{"version":80,"cve_count":81,"kev_count":17,"has_kev":18},"sp1",71,{"version":83,"cve_count":84,"kev_count":17,"has_kev":18},"sp2",42,{"version":86,"cve_count":87,"kev_count":17,"has_kev":18},"standard",68,{"version":89,"cve_count":90,"kev_count":17,"has_kev":18},"standard_64-bit",22,{"version":92,"cve_count":93,"kev_count":17,"has_kev":18},"web",66,{"version":95,"cve_count":75,"kev_count":17,"has_kev":18},"web_edition",{"version":97,"cve_count":75,"kev_count":17,"has_kev":18},"xp_sp2","Windows 2003 Server by Microsoft is a technology product with 32 tracked versions and 546 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":24,"kev_count":17,"has_kev":18},{"version":26,"cve_count":21,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":21,"kev_count":17,"has_kev":18},{"version":33,"cve_count":21,"kev_count":17,"has_kev":18},{"version":35,"cve_count":21,"kev_count":17,"has_kev":18},{"version":37,"cve_count":38,"kev_count":17,"has_kev":18},{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},{"version":43,"cve_count":44,"kev_count":17,"has_kev":18},{"version":46,"cve_count":21,"kev_count":17,"has_kev":18},{"version":48,"cve_count":21,"kev_count":17,"has_kev":18},{"version":50,"cve_count":51,"kev_count":17,"has_kev":18},{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},{"version":56,"cve_count":41,"kev_count":17,"has_kev":18},{"version":58,"cve_count":44,"kev_count":17,"has_kev":18},{"version":60,"cve_count":21,"kev_count":17,"has_kev":18},{"version":62,"cve_count":63,"kev_count":17,"has_kev":18},{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},{"version":68,"cve_count":21,"kev_count":17,"has_kev":18},{"version":70,"cve_count":21,"kev_count":17,"has_kev":18},{"version":72,"cve_count":21,"kev_count":17,"has_kev":18},{"version":74,"cve_count":75,"kev_count":17,"has_kev":18},{"version":77,"cve_count":78,"kev_count":21,"has_kev":4},{"version":80,"cve_count":81,"kev_count":17,"has_kev":18},{"version":83,"cve_count":84,"kev_count":17,"has_kev":18},{"version":86,"cve_count":87,"kev_count":17,"has_kev":18},{"version":89,"cve_count":90,"kev_count":17,"has_kev":18},{"version":92,"cve_count":93,"kev_count":17,"has_kev":18},{"version":95,"cve_count":75,"kev_count":17,"has_kev":18},{"version":97,"cve_count":75,"kev_count":17,"has_kev":18},[133,141,147,152,157,163,169,176,180,184],{"cveId":134,"description":135,"publishedDate":136,"cvssScore":137,"cvssVersion":138,"severity":139,"isKev":18,"epssScore":140},"CVE-2003-0352","Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster\u002FMSblast\u002FLovSAN and Nachi\u002FWelchia worms.","2003-08-18",7.5,"v2","High",0.98484,{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"cvssVersion":138,"severity":139,"isKev":18,"epssScore":146},"CVE-2010-0483","vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka \"VBScript Help Keypress Vulnerability.\"","2010-03-03",7.6,0.86634,{"cveId":148,"description":149,"publishedDate":150,"cvssScore":137,"cvssVersion":138,"severity":139,"isKev":18,"epssScore":151},"CVE-2005-4560","The Windows Graphical Device Interface library (GDI32.DLL) in Microsoft Windows allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) format image with a crafted SETABORTPROC GDI Escape function call, related to the Windows Picture and Fax Viewer (SHIMGVW.DLL), a different vulnerability than CVE-2005-2123 and CVE-2005-2124, and as originally discovered in the wild on unionseek.com.","2005-12-28",0.86093,{"cveId":153,"description":154,"publishedDate":155,"cvssScore":137,"cvssVersion":138,"severity":139,"isKev":18,"epssScore":156},"CVE-2003-0533","Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via a packet that causes the DsRolerUpgradeDownlevelServer function to create long debug entries for the DCPROMO.LOG log file, as exploited by the Sasser worm.","2004-06-01",0.85485,{"cveId":158,"description":159,"publishedDate":160,"cvssScore":41,"cvssVersion":138,"severity":161,"isKev":18,"epssScore":162},"CVE-2006-3439","Buffer overflow in the Server Service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers, including anonymous users, to execute arbitrary code via a crafted RPC message, a different vulnerability than CVE-2006-1314.","2006-08-09","Critical",0.84957,{"cveId":164,"description":165,"publishedDate":166,"cvssScore":24,"cvssVersion":138,"severity":167,"isKev":18,"epssScore":168},"CVE-2005-0356","Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.","2005-05-31","Medium",0.82756,{"cveId":170,"description":171,"publishedDate":172,"cvssScore":173,"cvssVersion":174,"severity":139,"isKev":4,"epssScore":175},"CVE-2010-0806","Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object, as exploited in the wild in March 2010, aka \"Uninitialized Memory Corruption Vulnerability.\"","2010-03-10",8.8,"v3.1",0.82241,{"cveId":177,"description":178,"publishedDate":179,"cvssScore":137,"cvssVersion":138,"severity":139,"isKev":18,"epssScore":175},"CVE-2003-0818","Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.","2004-03-03",{"cveId":181,"description":182,"publishedDate":155,"cvssScore":137,"cvssVersion":138,"severity":139,"isKev":18,"epssScore":183},"CVE-2003-0719","Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.",0.81203,{"cveId":185,"description":186,"publishedDate":187,"cvssScore":24,"cvssVersion":138,"severity":167,"isKev":18,"epssScore":188},"CVE-2004-0790","Multiple TCP\u002FIP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the \"blind connection-reset attack.\"  NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability.  While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.","2005-04-12",0.80101,[190,199,202,210,220],{"cveId":191,"description":192,"publishedDate":193,"cvssScore":173,"severity":139,"isKev":4,"epssScore":194,"cisaVulnName":195,"cisaDateAdded":196,"cisaShortDescription":197,"cisaRequiredAction":198},"CVE-2009-1537","Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted QuickTime media file, as exploited in the wild in May 2009, aka \"DirectX NULL Byte Overwrite Vulnerability.\"","2009-05-29",0.51207,"Microsoft DirectX NULL Byte Overwrite Vulnerability","2026-05-20","Microsoft DirectX contains a NULL byte overwrite vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow which could allow remote attackers to execute arbitrary code via a crafted QuickTime media file.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":170,"description":171,"publishedDate":172,"cvssScore":173,"severity":139,"isKev":4,"epssScore":175,"cisaVulnName":200,"cisaDateAdded":196,"cisaShortDescription":201,"cisaRequiredAction":198},"Microsoft Internet Explorer Use-After-Free Vulnerability","Microsoft Internet Explorer contains an use-after-free vulnerability that could allow remote attackers to execute arbitrary code via vectors involving access to an invalid pointer after the deletion of an object. The impacted product could be end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue product utilization.",{"cveId":203,"description":204,"publishedDate":205,"cvssScore":173,"severity":139,"isKev":4,"epssScore":206,"cisaVulnName":207,"cisaDateAdded":208,"cisaShortDescription":209,"cisaRequiredAction":198},"CVE-2008-0015","Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote attackers to execute arbitrary code via a crafted web page, as exploited in the wild in July 2009, aka \"Microsoft Video ActiveX Control Vulnerability.\"","2009-07-07",0.76576,"Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","2026-02-17","Microsoft Windows Video ActiveX Control contains a remote code execution vulnerability. An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.",{"cveId":211,"description":212,"publishedDate":213,"cvssScore":214,"severity":139,"isKev":4,"epssScore":215,"cisaVulnName":216,"cisaDateAdded":217,"cisaShortDescription":218,"cisaRequiredAction":219},"CVE-2013-5065","NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.","2013-11-28",7.8,0.34651,"Microsoft Windows Kernel Privilege Escalation Vulnerability","2022-03-03","Microsoft Windows NDProxy.sys in the kernel contains an improper input validation vulnerability which can allow a local attacker to escalate privileges.","Apply updates per vendor instructions.",{"cveId":221,"description":222,"publishedDate":223,"cvssScore":214,"severity":139,"isKev":4,"epssScore":224,"cisaVulnName":225,"cisaDateAdded":217,"cisaShortDescription":226,"cisaRequiredAction":219},"CVE-2015-1701","Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka \"Win32k Elevation of Privilege Vulnerability.\"","2015-04-21",0.55923,"Microsoft Win32k Privilege Escalation Vulnerability","An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges.",{"title":228,"metaDescription":229,"keywords":230,"structuredData":231},"Windows 2003 Server by Microsoft - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Windows 2003 Server by Microsoft covering 32 versions with 546 tracked vulnerabilities including 0 critical and 5 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Windows 2003 Server vulnerabilities, Windows 2003 Server security, Windows 2003 Server CVE, Microsoft Windows 2003 Server, Windows 2003 Server threat intelligence, Microsoft security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Windows 2003 Server KEV, Windows 2003 Server exploited vulnerabilities",{"@context":232,"@type":233,"name":234,"description":229,"url":235,"manufacturer":236,"applicationCategory":240,"softwareVersion":241,"mainEntity":242},"https:\u002F\u002Fschema.org","SoftwareApplication","Windows 2003 Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fmicrosoft\u002Fwindows_2003_server",{"@type":237,"name":238,"url":239},"Organization","Microsoft","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fmicrosoft","Security Software","32 versions tracked",{"@type":243,"name":244,"description":245,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Windows 2003 Server Security Vulnerabilities","Security vulnerabilities affecting Windows 2003 Server by Microsoft",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":247,"apiVersion":248},"2026-10-16T23:23:22.555Z","3.0",[],{"rows":251,"total":24,"capped":18,"failed":17},[252,257,261,265,269],{"cveId":191,"name":195,"severity":139,"cvss":173,"added":196,"epss":194,"published":253,"ranges":254,"checked":4,"hits":256,"covers":18},"2009-05-29T18:30:00.187",[255],"all versions",[],{"cveId":170,"name":200,"severity":139,"cvss":173,"added":196,"epss":175,"published":258,"ranges":259,"checked":4,"hits":260,"covers":18},"2010-03-10T22:30:01.323",[],[],{"cveId":203,"name":207,"severity":139,"cvss":173,"added":208,"epss":206,"published":262,"ranges":263,"checked":4,"hits":264,"covers":18},"2009-07-07T23:30:00.187",[],[],{"cveId":211,"name":216,"severity":139,"cvss":214,"added":217,"epss":215,"published":266,"ranges":267,"checked":4,"hits":268,"covers":18},"2013-11-28T00:55:04.677",[],[],{"cveId":221,"name":225,"severity":139,"cvss":214,"added":217,"epss":224,"published":270,"ranges":271,"checked":4,"hits":273,"covers":18},"2015-04-21T10:59:00.073",[272],"r2-sp2",[]]