CVE

Id
7732  
CVE No.
CVE-2003-0908  
Status
Candidate  
Description
The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.  
Phase
Assigned (20031104)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
45754 7732 CVE-2003-0908 VULNWATCH:20040414 [SHATTER Team Security Alert] Microsoft Windows Utility Manager Vulnerability  View
45755 7732 CVE-2003-0908 URL:http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0082.html  View
45756 7732 CVE-2003-0908 MISC:http://www.appsecinc.com/resources/alerts/general/04-0001.html  View
45757 7732 CVE-2003-0908 MS:MS04-011  View
45758 7732 CVE-2003-0908 URL:http://www.microsoft.com/technet/security/bulletin/ms04-011.mspx  View
45759 7732 CVE-2003-0908 CERT:TA04-104A  View
45760 7732 CVE-2003-0908 URL:http://www.us-cert.gov/cas/techalerts/TA04-104A.html  View
45761 7732 CVE-2003-0908 CERT-VN:VU#526084  View
45762 7732 CVE-2003-0908 URL:http://www.kb.cert.org/vuls/id/526084  View
45763 7732 CVE-2003-0908 CIAC:O-114  View
45764 7732 CVE-2003-0908 URL:http://www.ciac.org/ciac/bulletins/o-114.shtml  View
45765 7732 CVE-2003-0908 MISC:http://www.securiteam.com/windowsntfocus/5LP0C2ACKU.html  View
45766 7732 CVE-2003-0908 BID:10124  View
45767 7732 CVE-2003-0908 URL:http://www.securityfocus.com/bid/10124  View
45768 7732 CVE-2003-0908 OVAL:oval:org.mitre.oval:def:1046  View
45769 7732 CVE-2003-0908 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1046  View
45770 7732 CVE-2003-0908 XF:win2k-utilitymgr-gain-privileges(15632)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62785 JVNDB-2004-000126 Microsoft Windows における不適切なタスク作成による権限昇格の脆弱性 Microsoft Windows には、タスク作成時の権限のチェックを適切に行わない脆弱性が存在します。 CVE-2003-0909 7732 7.2 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000126.html  View