CVE-2003-0907: microsoft windows_server_2003 Argument Injection

EPSS trend

Probability

21.85%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 21.85% on 19-09-2026

19-09-202619-10-2026

EPSS score

21.85%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

11 links

www.ciac.org/ciac/bulletins/o-114.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIACBroken Link
www.kb.cert.org/vuls/id/260588Third Party AdvisoryX Refsource CERT VNPatchUS Government Resource
www.securityfocus.com/bid/10119VDB EntryX Refsource BIDBroken LinkThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1000VDB EntrySignatureX Refsource OVALBroken Link
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011Vendor AdvisoryX Refsource MSPatch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A904VDB EntrySignatureX Refsource OVALBroken Link
www.us-cert.gov/cas/techalerts/TA04-104A.htmlThird Party AdvisoryX Refsource CERTBroken LinkUS Government Resource
lists.grok.org.uk/pipermail/full-disclosure/2004-April/020065.htmlMailing ListX Refsource FULLDISCBroken Link
marc.info?l=bugtraq&m=108196864221676&w=2Mailing ListX Refsource BUGTRAQThird Party Advisory
www.idefense.com/application/poi/display?id=100&type=vulnerabilitiesX Refsource MISCBroken Link

Show all 11 references

exchange.xforce.ibmcloud.com/vulnerabilities/15704VDB EntryX Refsource XFThird Party Advisory

Related vulnerabilities

CVE-2003-1048microsoftinternet_explorer+726.63%22y ago21-07-2004 04:00Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.CVE-2003-0904microsoftexchange_server+28.16%22y ago08-01-2004 05:00Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.CVE-2013-1263microsoftwindows_xp1.47%13y ago13-02-2013 11:00Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.CVE-2013-1252microsoftwindows_xp1.47%13y ago13-02-2013 11:00Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.CVE-2013-1269microsoftwindows_xp1.52%13y ago13-02-2013 11:00Race condition in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges, and consequently read the contents of arbitrary kernel memory locations, via a crafted application, a different vulnerability than other CVEs listed in MS13-016.CVE-2013-1286microsoftwindows_7+51.46%13y ago13-03-2013 00:00The USB kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, and Windows Server 2012 do not properly handle objects in memory, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability," a different vulnerability than CVE-2013-1285 and CVE-2013-1287.

All vulnerabilities inwindows_server_2003 windows_xp

CVE-2003-0907: microsoft windows_server_2003 Argument Injection

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References