CVE-2003-0813

Windows 2000 - Denial of Service via RPC DCOM Race Condition

Title source: llm
STIX 2.1

Description

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

References (15)

Core 15
Core References
URL Repurposed mailing-list x_refsource_fulldisc
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html
Third Party Advisory mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=106579825211708&w=2
URL Repurposed mailing-list x_refsource_fulldisc
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011901.html
Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/547820
Third Party Advisory mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=106588827513795&w=2
Broken Link, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA04-104A.html
Patch, Vendor Advisory vendor-advisory x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012
Third Party Advisory mailing-list x_refsource_ntbugtraq
http://marc.info/?l=ntbugtraq&m=106580303918155&w=2
Broken Link x_refsource_misc
http://www.securitylab.ru/_exploits/rpc2.c.txt
Broken Link, Patch, Vendor Advisory third-party-advisory x_refsource_iss
http://xforce.iss.net/xforce/alerts/id/155
Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/8811
URL Repurposed mailing-list x_refsource_fulldisc
http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011886.html

Scores

EPSS 0.1484
EPSS Percentile 96.3%

Details

CWE
CWE-367
Status published
Products (5)
microsoft/windows_2000 (3 CPE variants)
microsoft/windows_98
microsoft/windows_nt 4.0 sp6a (2 CPE variants)
microsoft/windows_server_2003 (2 CPE variants)
microsoft/windows_xp (2 CPE variants)
Published Nov 17, 2003
Tracked Since Feb 18, 2026