Executive Summary
| Informations | |||
|---|---|---|---|
| Name | MS03-041 | First vendor Publication | N/A |
| Vendor | Microsoft | Last vendor Modification | N/A |
| Severity (Vendor) | N/A | Revision | N/A |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P) | |||
|---|---|---|---|
| Cvss Base Score | 7.5 | Attack Range | Network |
| Cvss Impact Score | 6.4 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Vulnerability in Authenticode Verification Could Allow Remote Code Execution (823182) |
OVAL Definitions
| Definition Id: oval:org.mitre.oval:def:185 | |||
| Oval ID: | oval:org.mitre.oval:def:185 | ||
| Title: | Automatic ActiveX Approval on WinXP Low Memory | ||
| Description: | The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers execute arbitrary code without user approval. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0660 | Version: | 7 |
| Platform(s): | Microsoft Windows XP | Product(s): | Authenticode |
| Definition Synopsis: | |||
| |||
| Definition Id: oval:org.mitre.oval:def:198 | |||
| Oval ID: | oval:org.mitre.oval:def:198 | ||
| Title: | Automatic ActiveX Approval on Windows 2000 Low Memory | ||
| Description: | The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers execute arbitrary code without user approval. | ||
| Family: | windows | Class: | vulnerability |
| Reference(s): | CVE-2003-0660 | Version: | 1 |
| Platform(s): | Microsoft Windows 2000 | Product(s): | |
| Definition Synopsis: | |||
| |||
CPE : Common Platform Enumeration
OpenVAS Exploits
| Date | Description |
|---|---|
| 2009-03-15 | Name : MS04-011 security check File : nvt/remote-MS04-011.nasl |
| 2005-11-03 | Name : Vulnerability in Authenticode Verification Could Allow Remote Code Execution ... File : nvt/smb_nt_ms03-041.nasl |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 11463 | Microsoft Windows Authenticode ActiveX Install Failure Remote Code Execution |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2003-10-15 | Name : Arbitrary code can be executed on the remote host through the web client. File : smb_nt_ms03-041.nasl - Type : ACT_GATHER_INFO |
Alert History
| Date | Informations |
|---|---|
| 2014-02-17 11:44:55 |
|
