CVE-2003-0605: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 58.8% chance of exploitation in the next 30 days.

The RPC DCOM interface in Windows 2000 SP3 and SP4 allows remote attackers to cause a denial of service (crash), and local attackers to use the DoS to hijack the epmapper pipe to gain privileges, via certain messages to the __RemoteGetClassObject interface that cause a NULL pointer to be passed to the PerformScmStage function.

Affected products

• Microsoft Windows 2000: any version

Published 2003-08-27. Last modified 2026-06-16.