CVEvulnerability
CVE-2003-0660
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2003-11-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
Affected configurations
• microsoft windows 2000
• microsoft windows 2003 server enterprise
• microsoft windows 2003 server enterprise 64-bit
• microsoft windows 2003 server r2
• microsoft windows 2003 server standard
• microsoft windows 2003 server web
• microsoft windows nt 4.0
• microsoft windows xp
Related
Referenced by CWE · observed example (1)
- CWE-356 Missing User Interaction for Potentially Unsafe Action weakness
References
- http://www.cert.org/advisories/CA-2003-27.html US Government Resource
- http://www.kb.cert.org/vuls/id/838572 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/8830 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-041 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13422 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A185 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A198 oval.cisecurity.org
- http://www.cert.org/advisories/CA-2003-27.html US Government Resource
- http://www.kb.cert.org/vuls/id/838572 Patch, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/8830 Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-041 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13422 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A185 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A198 oval.cisecurity.org