CVE-2003-0660
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user...
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
Exploit likelihood
What each source reports
NVD Score used
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
- Record
CVE-2003-0660- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
- Record
CVE-2003-0660- Updated
- 2026-11-02
EUVDEUVD-2003-0654 No score
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
- Record
EUVD-2003-0654- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-prj5-hr6w-gvq6 No score
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user...
The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval.
- Record
GHSA-prj5-hr6w-gvq6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0660 is a high vulnerability (CVSS 7.5) in Microsoft Windows Nt, published October 17, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 24.5%, the 97th percentile. No source names a fixed version.
References
cert.org/advisories/CA-2003-27.html
exchange.xforce.ibmcloud.com/vulnerabilities/13422
kb.cert.org/vuls/id/838572
securityfocus.com/bid/8830
docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-041
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A198
nvd.nist.gov/vuln/detail/CVE-2003-0660
github.com/advisories/GHSA-prj5-hr6w-gvq6