CVE-2003-1544: Medium severity Microsoft Windows 2000 vulnerability

Published Dec 31, 2003

Updated

Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service (reboot) by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded.

Affected Software

2 affected components

Microsoft Windows 2000=sp3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Microsoft Windows 2000 to a version that resolves this vulnerability.
Fixed in SP4

Event History

Dec 31, 2003

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Feb 14, 2008

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2003-1544?

CVE-2003-1544 is classified as a critical vulnerability due to its potential to cause denial of service by rebooting the system.

How do I fix CVE-2003-1544?

To mitigate CVE-2003-1544, it is essential to upgrade to Windows 2000 Service Pack 4 or later.

What does CVE-2003-1544 affect?

CVE-2003-1544 affects Windows 2000 before Service Pack 4 and Windows XP.

Can CVE-2003-1544 be exploited remotely?

Yes, CVE-2003-1544 can be exploited by remote authenticated users.

What is the impact of CVE-2003-1544?

The impact of CVE-2003-1544 is a denial of service that prevents msgina.dll from being loaded, causing system instability.