VULNERABILITY INTELLIGENCE

CVE-2003-0825

CVSS score9.3 HIGH
EPSS probability12.16%
CISA KEVNot currently listed
Published2004-03-03
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

The Windows Internet Naming Service (WINS) for Microsoft Windows Server 2003, and possibly Windows NT and Server 2000, does not properly validate the length of certain packets, which allows attackers to cause a denial of service and possibly execute arbitrary code.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references