CVEs published October 17, 2003
9 CVEs were published on October 17, 2003: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- org.apache.tomcat:tomcat
- 1
Medium, low and unrated 9
- CVE-2003-0659Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_D
- CVE-2003-0660The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls wh
- CVE-2003-0662Buffer overflow in Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier allows remote attackers to execute
- CVE-2003-0711Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remo
- CVE-2003-0712Cross-site scripting (XSS) vulnerability in the HTML encoding for the Compose New Message form in Microsoft Exchange Server 5.5 Outlook Web
- CVE-2003-0714The Internet Mail Service in Exchange Server 5.5 and Exchange 2000 allows remote attackers to cause a denial of service (memory exhaustion)
- CVE-2003-0717The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers t
- CVE-2003-0865Heap-based buffer overflow in readstring of httpget.c for mpg123 0.59r and 0.59s allows remote attackers to execute arbitrary code via a lon
- CVE-2003-0866The Catalina org.apache.catalina.connector.http package in Tomcat 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service viaorg.apache.tomcat:tomcat