CVE-2003-0909
Windows XP allows local users to execute arbitrary programs by creating a task at an elevated...
Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."
- Record
CVE-2003-0909- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."
- Record
CVE-2003-0909- Updated
- 2026-11-02
EUVDEUVD-2003-0899 No score
Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."
- Record
EUVD-2003-0899- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4f63-f425-rwcr No score
Windows XP allows local users to execute arbitrary programs by creating a task at an elevated...
Windows XP allows local users to execute arbitrary programs by creating a task at an elevated privilege level through the eventtriggers.exe command-line tool or the Task Scheduler service, aka "Windows Management Vulnerability."
- Record
GHSA-4f63-f425-rwcr- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0909 is a high vulnerability (CVSS 7.2) in Microsoft Windows Xp, published April 16, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 20.9%, the 97th percentile. No source names a fixed version.
References
ciac.org/ciac/bulletins/o-114.shtml
securityfocus.com/bid/10125
exchange.xforce.ibmcloud.com/vulnerabilities/15678
kb.cert.org/vuls/id/206468
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011
us-cert.gov/cas/techalerts/TA04-104A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1004
nvd.nist.gov/vuln/detail/CVE-2003-0909
github.com/advisories/GHSA-4f63-f425-rwcr