Windows Server 2003 vulnerabilities

17 known vulnerabilities in Windows Server 2003 from Microsoft. 17 are rated high or critical, and 17 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft ATM Font Driver Privilege Escalation Exploited

  CVE-2015-2387Jul 14, 2015MicrosoftEPSS 34.9%

  ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users

• 7.2 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2015-2360Jun 10, 2015MicrosoftEPSS 14.8%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users

• 9.0 High severity

  Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Exploited

  CVE-2014-6324Nov 18, 2014MicrosoftEPSS 87.3%

  The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote authenticated domain users to obtai

• 9.3 High severity

  Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Exploited

  CVE-2014-6332Nov 11, 2014MicrosoftEPSS 94.9%

  OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary co

• 7.8 High severity

  Microsoft IME Japanese Privilege Escalation Exploited

  CVE-2014-4077Nov 11, 2014MicrosoftEPSS 54.6%

  Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is installed, allow remote attackers to bypass a sandbox protection mechanism via a crafted PD

• 8.8 High severity

  Microsoft Windows Remote Code Execution Exploited

  CVE-2014-4148Oct 15, 2014MicrosoftEPSS 59.9%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to ex

• 7.2 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2014-4113Oct 15, 2014MicrosoftEPSS 86.6%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain pr

• 8.8 High severity

  Microsoft Windows Out-of-Bounds Write Exploited

  CVE-2013-3918Nov 12, 2013MicrosoftEPSS 73.9%

  The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, an

• 7.8 High severity

  Microsoft Win32k Privilege Escalation Exploited

  CVE-2013-3660May 24, 2013MicrosoftEPSS 39.3%

  The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 does not proper

• 7.8 High severity

  Microsoft Windows Authenticode Signature Verification Remote Code Execution Exploited

  CVE-2012-0151Apr 10, 2012MicrosoftEPSS 87.7%

  The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and Windows 8 Consumer Preview does not properly validate the dig

• 8.8 High severity

  Microsoft Windows Remote Code Execution Exploited

  CVE-2011-3402Nov 4, 2011MicrosoftEPSS 78.3%

  Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows r

• 7.8 High severity

  Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Exploited

  CVE-2011-2005Oct 12, 2011MicrosoftEPSS 31.8%

  afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which allows local users to gain privileges via a crafted application, aka "Ancillary Function Dr

• 7.8 High severity

  Microsoft Windows Kernel Stack-Based Buffer Overflow Exploited

  CVE-2010-4398Dec 6, 2010MicrosoftEPSS 8.66%

  Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges

• 9.3 High severity

  Microsoft Windows Remote Code Execution Exploited

  CVE-2010-2568Jul 22, 2010MicrosoftEPSS 89.6%

  Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handle

• 7.8 High severity

  Microsoft Windows Improper Input Validation Exploited

  CVE-2009-1123Jun 10, 2009MicrosoftEPSS 4.88%

  The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, ak

• 9.3 High severity

  Microsoft DirectX NULL Byte Overwrite Exploited

  CVE-2009-1537May 29, 2009MicrosoftEPSS 51.1%

  Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2 allows remote attackers to execute arbitrary code via a cr

• 10.0 High severity

  Microsoft Windows Buffer Overflow Exploited

  CVE-2008-4250Oct 23, 2008MicrosoftEPSS 98.8%

  The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canoni