CVE-2003-0825

Critical

Description

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.

SeverityCritical
CVSS9.3
Exploit probability96. percentile12.2%
ProductMicrosoft Windows
PublishedMar 3, 2004
First seenMar 3, 2004

How to fix

Affected products

ProductAffected versionsFixed in
microsoft windows_2000No range specified—
microsoft windows_2003_serverNo range specified, enterprise, enterprise_64-bit, r2, standard, web—
microsoft windows_nt4.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.