Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2003

30 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-0886
    44Plan

    Format string vulnerability in hfaxd for Hylafax 4.1.7 and earlier allows remote attackers to execute arbitrary code.

    CriticalCVSS 10.0Proof of conceptEPSS 12%

    hylafax · hylafaxDec 1, 2003

  • CVE-2003-0812
    55Plan

    Stack-based buffer overflow in a logging function for Windows Workstation Service (WKSSVC.DLL) allows remote attackers to execute arbitrary

    HighCVSS 7.5WeaponizedEPSS 82%

    microsoft · windows 2000Dec 15, 2003

  • CVE-2003-0820
    38Monitor

    Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Works Suites 2001 through 2004, do not properly check the length of the "Macro names

    HighCVSS 7.5No exploitEPSS 26%

    microsoft · wordDec 15, 2003

  • CVE-2003-0821
    36Monitor

    Microsoft Excel 97, 2000, and 2002 allows remote attackers to execute arbitrary code via a spreadsheet with a malicious XLM (Excel 4) macro

    HighCVSS 7.5No exploitEPSS 19%

    microsoft · wordDec 15, 2003

  • CVE-2003-0822
    55Plan

    Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attack

    HighCVSS 7.5WeaponizedEPSS 83%

    microsoft · frontpage server extensionsDec 15, 2003

  • CVE-2003-0824
    31Monitor

    Unknown vulnerability in the SmartHTML interpreter (shtml.dll) in Microsoft FrontPage Server Extensions 2000 and 2002, and Microsoft SharePo

    MediumCVSS 5.0No exploitEPSS 36%

    microsoft · frontpage server extensionsDec 15, 2003

  • CVE-2003-0962
    37Monitor

    Heap-based buffer overflow in rsync before 2.5.7, when running in server mode, allows remote attackers to execute arbitrary code and possibl

    HighCVSS 7.5No exploitEPSS 23%

    andrew tridgell · rsyncDec 15, 2003

  • CVE-2003-1200
    50Plan

    Stack-based buffer overflow in FORM2RAW.exe in Alt-N MDaemon 6.5.2 through 6.8.5 allows remote attackers to execute arbitrary code via a lon

    HighCVSS 7.5WeaponizedEPSS 65%

    alt-n · mdaemonDec 29, 2003

  • CVE-2003-1083
    46Plan

    Stack-based buffer overflow in Monit 1.4 to 4.1 allows remote attackers to execute arbitrary code via a long HTTP request.

    CriticalCVSS 10.0Proof of conceptEPSS 21%

    tildeslash · monitDec 31, 2003

  • CVE-2003-1096
    43Plan

    The Cisco LEAP challenge/response authentication mechanism uses passwords in a way that is susceptible to dictionary attacks, which makes it

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    cisco · leapDec 31, 2003

  • CVE-2003-1105
    15Monitor

    Unknown vulnerability in Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to cause a denial of service (browser or Outlook

    LowCVSS 2.6No exploitEPSS 17%

    microsoft · ieDec 31, 2003

  • CVE-2003-1118
    35Monitor

    Buffer overflow in the SETI@home client 3.03 and other versions allows remote attackers to cause a denial of service (client crash) and exec

    HighCVSS 7.5Proof of conceptEPSS 18%

    university of california · seti at homeDec 31, 2003

  • CVE-2003-1123
    33Monitor

    Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applet

    HighCVSS 7.5Proof of conceptEPSS 11%

    sun · jdkDec 31, 2003

  • CVE-2003-1172
    29Monitor

    Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to

    MediumCVSS 5.0Proof of conceptEPSS 30%

    apache · cocoonDec 31, 2003

  • CVE-2003-1177
    34Monitor

    Buffer overflow in the base64 decoder in MERCUR Mailserver 4.2 before SP3a allows remote attackers to cause a denial of service and possibly

    HighCVSS 7.5Proof of conceptEPSS 12%

    atrium software · mercur mailserverDec 31, 2003

  • CVE-2003-1228
    34Monitor

    Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote atta

    HighCVSS 7.5Proof of conceptEPSS 14%

    mathopd · mathopdDec 31, 2003

  • CVE-2003-1236
    45Plan

    Multiple format string vulnerabilities in the logger function in netzio.c for Tanne 0.6.17 allows remote attackers to execute arbitrary code

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    tanne · tanneDec 31, 2003

  • CVE-2003-1275
    25Monitor

    Pocket Internet Explorer (PIE) 3.0 allows remote attackers to cause a denial of service (crash) via a Javascript function that uses the obje

    MediumCVSS 5.0Proof of conceptEPSS 16%

    microsoft · pocket ieDec 31, 2003

  • CVE-2003-1303
    24Monitor

    Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to ca

    MediumCVSS 5.0No exploitEPSS 12%

    php · phpDec 31, 2003

  • CVE-2003-1336
    48Plan

    Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

    CriticalCVSS 9.3WeaponizedEPSS 35%

    mirc · mircDec 31, 2003

  • CVE-2003-1337
    34Monitor

    Heap-based buffer overflow in Aprelium Abyss Web Server 1.1.2 and earlier allows remote attackers to execute arbitrary code via a long HTTP

    HighCVSS 7.5No exploitEPSS 12%

    aprelium technologies · abyss web serverDec 31, 2003

  • CVE-2003-1339
    55Plan

    Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare allows remote attack

    CriticalCVSS 10.0Proof of conceptEPSS 48%

    ezmeeting · ezmeetingDec 31, 2003

  • CVE-2003-1378
    40Plan

    Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary pr

    HighCVSS 8.8Proof of conceptEPSS 15%

    microsoft · outlookDec 31, 2003

  • CVE-2003-1387
    34Monitor

    Buffer overflow in Opera 6.05 and 6.06, and possibly other versions, allows remote attackers to execute arbitrary code via a URL with a long

    HighCVSS 7.5Proof of conceptEPSS 14%

    opera · opera browserDec 31, 2003

  • CVE-2003-1425
    43Plan

    guestbook.cgi in cPanel 5.0 allows remote attackers to execute arbitrary commands via the template parameter.

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    cpanel · cpanelDec 31, 2003

  • CVE-2003-1448
    36Monitor

    Memory leak in the Windows 2000 kernel allows remote attackers to cause a denial of service (SMB request hang) via a NetBIOS continuation pa

    HighCVSS 7.8No exploitEPSS 15%

    microsoft · windows 2000Dec 31, 2003

  • CVE-2003-1484
    20Monitor

    Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the Anch

    MediumCVSS 4.3No exploitEPSS 11%

    microsoft · ieDec 31, 2003

  • CVE-2003-1505
    21Monitor

    Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a te

    MediumCVSS 4.3Proof of conceptEPSS 12%

    microsoft · internet explorerDec 31, 2003

  • CVE-2003-1544
    32Monitor

    Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cau

    MediumCVSS 6.8No exploitEPSS 17%

    microsoft · windows 2000Dec 31, 2003

  • CVE-2003-1559
    25Monitor

    Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http://

    MediumCVSS 5.0No exploitEPSS 15%

    microsoft · ieDec 31, 2003