Skip to main content

CVE-2003-0908

7.2
CVSS v2.0 Base Score
27.42%
LOW RiskEPSS (98th percentile)
NVD-CWE-Other

The Utility Manager in Microsoft Windows 2000 executes winhlp32.exe with system privileges, which allows local users to execute arbitrary code via a "Shatter" style attack using a Windows message that accesses the context sensitive help button in the GUI, as demonstrated using the File Open dialog in the Help window, a different vulnerability than CVE-2004-0213.

Published: 6/1/2004
Modified: 6/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v2 Score

7.2

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Score (Exploitation Probability)

27.42%LOW Exploitation Risk
98th percentile

This vulnerability has a 27.42% probability of being exploited in the next 30 days, ranking higher than 98% of all scored CVEs.

CWE Classification

NVD-CWE-Other