CVE-2003-0813

Description

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

Weakness classification

• CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition

Primary references

• cve@mitre.org — URL Repurposed
• cve@mitre.org — URL Repurposed
• cve@mitre.org — URL Repurposed
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory, US Government Resource
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link, Third Party Advisory, US Government Resource
• cve@mitre.org — Broken Link, Patch, Vendor Advisory
• cve@mitre.org — Patch, Vendor Advisory