CVE-2003-0813

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

CVSS v2.0

5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

16.96% chance of exploitation in the next 30 days, 97th percentile

Published

2003-10-15

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html

References

• CVE Record
• NVD entry

Related

• CVE-2003-0812
• CVE-2003-0816
• CVE-2003-0809
• CVE-2003-0818
• CVE-2003-0805
• CVE-2003-0822