Windows 2003 Server vulnerabilities

4 known vulnerabilities in Windows 2003 Server from Microsoft. 4 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2015-1701Apr 21, 2015MicrosoftEPSS 56.2%

  Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability

• 7.8 High severity

  Microsoft Windows Kernel Privilege Escalation Exploited

  CVE-2013-5065Nov 28, 2013MicrosoftEPSS 34.7%

  NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in November 2013.

• 9.3 High severity

  Microsoft Windows Video ActiveX Control Remote Code Execution Exploited

  CVE-2008-0015Jul 7, 2009MicrosoftEPSS 76.6%

  Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl.dll in DirectShow, in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista G

• 9.3 High severity

  Microsoft DirectX NULL Byte Overwrite Exploited

  CVE-2009-1537May 29, 2009MicrosoftEPSS 51.1%

  Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a cr