CVE-2003-0813

MEDIUM 5.1CVE-2003-0813 · Published 17/11/2003 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.

References

lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html · URL Repurposed
lists.grok.org.uk/pipermail/full-disclosure/2003-October/011886.html · URL Repurposed
lists.grok.org.uk/pipermail/full-disclosure/2003-October/011901.html · URL Repurposed
marc.info · Third Party Advisory
marc.info · Third Party Advisory
marc.info · Third Party Advisory
kb.cert.org/vuls/id/547820 · Patch
securityfocus.com/bid/8811 · Broken Link
securitylab.ru/_exploits/rpc2.c.txt · Broken Link
us-cert.gov/cas/techalerts/TA04-104A.html · Broken Link
xforce.iss.net/xforce/alerts/id/155 · Broken Link
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012 · Patch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A893 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A894 · Broken Link
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A900 · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free