CVE-2003-0605
The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.
Scoring
- CVSS base score
- 2.43
- EPSS probability
- 60.64%
- Published
- 2003-07-29
- Last modified
- 2026-03-16
Affected products
- n/a n/a