Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: February 2004

12 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2003-0814
    38Monitor

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and execute Javascript by setting the window's "href

    HighCVSS 7.5No exploitEPSS 27%

    microsoft · ieFeb 3, 2004

  • CVE-2003-0815
    36Monitor

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions and read arbitrary files by (1) modifying the create

    HighCVSS 7.5No exploitEPSS 18%

    microsoft · ieFeb 3, 2004

  • CVE-2003-0816
    45Plan

    Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by (1) using the NavigateAndFind method to load a fi

    HighCVSS 7.5Proof of conceptEPSS 48%

    microsoft · ieFeb 3, 2004

  • CVE-2003-0817
    35Monitor

    Internet Explorer 5.01 through 6 SP1 allows remote attackers to bypass zone restrictions and read arbitrary files via an XML object.

    HighCVSS 7.5No exploitEPSS 17%

    microsoft · ieFeb 3, 2004

  • CVE-2003-0823
    38Monitor

    Internet Explorer 6 SP1 and earlier allows remote attackers to direct drag and drop behaviors and other mouse click actions to other windows

    HighCVSS 7.5No exploitEPSS 26%

    microsoft · ieFeb 3, 2004

  • CVE-2004-2086
    43Plan

    Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of

    MediumCVSS 5.0WeaponizedEPSS 75%

    sambar · sambar serverFeb 6, 2004

  • CVE-2004-2090
    25Monitor

    Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPic

    MediumCVSS 5.0Proof of conceptEPSS 16%

    microsoft · ieFeb 7, 2004

  • CVE-2004-1244
    40Plan

    Windows Media Player 9 allows remote attackers to execute arbitrary code via a PNG file containing large (1) width or (2) height values, aka

    HighCVSS 7.5No exploitEPSS 33%

    microsoft · windows media playerFeb 8, 2004

  • CVE-2003-0819
    52Plan

    Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary

    CriticalCVSS 10.0No exploitEPSS 40%

    microsoft · proxy serverFeb 17, 2004

  • CVE-2003-0903
    51Plan

    Buffer overflow in a component of Microsoft Data Access Components (MDAC) 2.5 through 2.8 allows remote attackers to execute arbitrary code

    CriticalCVSS 10.0No exploitEPSS 37%

    microsoft · data access componentsFeb 17, 2004

  • CVE-2003-1030
    35Monitor

    Buffer overflow in DameWare Mini Remote Control before 3.73 allows remote attackers to execute arbitrary code via a long pre-authentication

    HighCVSS 7.5Proof of conceptEPSS 17%

    dameware development · mini remote control serverFeb 17, 2004

  • CVE-2004-0095
    31Monitor

    McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute a

    MediumCVSS 5.0Proof of conceptEPSS 37%

    mcafee · epolicy orchestratorFeb 17, 2004