NetSight
IP …
medium5.1

CVE-2003-0813

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (c…

Impact

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

Affected products

VendorProductAffected versions
MicrosoftWindows 2000
All versions
MicrosoftWindows 98
All versions
MicrosoftWindows Nt
Version 4.0
MicrosoftWindows Server 2003
All versions
MicrosoftWindows Xp
All versions

Weakness classification

CWE-367

References