CVE-2003-0839: Microsoft Windows 2003 Server

Medium severity, CVSS 5.0. EPSS: 13.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.

Affected products

• Microsoft Windows 2003 Server: version r2 only

Published 2003-11-17. Last modified 2026-06-16.