CVE-2003-0813: microsoft windows_98

Vulnerability summary

CVE-2003-0813 is a medium (CVSS 5.1) vulnerability in microsoft windows_98. EPSS estimates a 16.96% chance of exploitation in the next 30 days, higher than 97% of scored vulnerabilities.

Timeline

1. 15-10-2003
   PublishedVulnerability first disclosed.
2. 08-08-2024
   Last modifiedVulnerability information updated.

Description

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

• CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionThe product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.