# CVEs published 2003-04-15

13 CVEs were published on April 15, 2003: 0 critical, 0 high. Days are UTC.

- [CVE-2003-0110](https://cve.now/CVE-2003-0110.md): The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Serve (no CVSS)
- [CVE-2003-0111](https://cve.now/CVE-2003-0111.md): The ByteCode Verifier component of Microsoft Virtual Machine (VM) build 5.0.3809 and earlier, as used in Windows and Internet Explorer, allo (no CVSS)
- [CVE-2003-0133](https://cve.now/CVE-2003-0133.md): GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages. (no CVSS)
- [CVE-2003-0136](https://cve.now/CVE-2003-0136.md): psbanner in the LPRng package allows local users to overwrite arbitrary files via a symbolic link attack on the /tmp/before file. (no CVSS)
- [CVE-2003-0163](https://cve.now/CVE-2003-0163.md): decrypt\_msg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote (no CVSS)
- [CVE-2003-0171](https://cve.now/CVE-2003-0171.md): DirectoryServices in MacOS X trusts the PATH environment variable to locate and execute the touch command, which allows local users to execu (no CVSS)
- [CVE-2003-0173](https://cve.now/CVE-2003-0173.md): xfsdq in xfsdump does not create quota information files securely, which allows local users to gain root privileges. (no CVSS)
- [CVE-2003-0196](https://cve.now/CVE-2003-0196.md): Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as disco (no CVSS)
- [CVE-2003-0198](https://cve.now/CVE-2003-0198.md): Mac OS X before 10.2.5 allows guest users to modify the permissions of the DropBox folder and read unauthorized files. (no CVSS)
- [CVE-2003-0201](https://cve.now/CVE-2003-0201.md): Buffer overflow in the call\_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG (no CVSS)
- [CVE-2003-0204](https://cve.now/CVE-2003-0204.md): KDE 2 and KDE 3.1.1 and earlier 3.x versions allows attackers to execute arbitrary commands via (1) PostScript (PS) or (2) PDF files, relate (no CVSS)
- [CVE-2003-0207](https://cve.now/CVE-2003-0207.md): ps2epsi creates insecure temporary files when calling ghostscript, which allows local attackers to overwrite arbitrary files. (no CVSS)
- [CVE-2003-0208](https://cve.now/CVE-2003-0208.md): Cross-site scripting (XSS) vulnerability in Macromedia Flash ad user tracking capability allows remote attackers to insert arbitrary Javascr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2003-04-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.