CVE-2003-0813
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch...
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
Exploit likelihood
What each source reports
NVD Score used
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
- Record
CVE-2003-0813- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-367
- Updated
- 2026-11-02
CVE List No score
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
- Record
CVE-2003-0813- Updated
- 2026-11-02
EUVDEUVD-2003-0804 No score
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
- Record
EUVD-2003-0804- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5f25-6f2x-h9x6 No score
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch...
A multi-threaded race condition in the Windows RPC DCOM functionality with the MS03-039 patch installed allows remote attackers to cause a denial of service (crash or reboot) by causing two threads to process the same RPC request, which causes one thread to use memory after it has been freed, a different vulnerability than CVE-2003-0352 (Blaster/Nachi), CVE-2003-0715, and CVE-2003-0528, and as demonstrated by certain exploits against those vulnerabilities.
- Record
GHSA-5f25-6f2x-h9x6- Weakness
- CWE-367
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0813 is a medium vulnerability (CVSS 5.1) in Microsoft Windows 2000, published October 15, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 17.0%, the 97th percentile. No source names a fixed version.
References
lists.grok.org.uk/pipermail/full-disclosure/2003-October/011870.html
marc.info?l=bugtraq&m=106579825211708&w=2
kb.cert.org/vuls/id/547820
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A894
Show 11 moreShow less
us-cert.gov/cas/techalerts/TA04-104A.html
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-012
securitylab.ru/_exploits/rpc2.c.txt
xforce.iss.net/xforce/alerts/id/155
securityfocus.com/bid/8811
nvd.nist.gov/vuln/detail/CVE-2003-0813
github.com/advisories/GHSA-5f25-6f2x-h9x6