CVE-2003-0715 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Windows 2003 Server
5 documents4 sources
Severity
10.0CRITICALNVD
CNA7.5
EPSS
57.5%
top 1.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 17
Latest updateApr 29
Description
Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528.
CVSS vector
AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-79xx-p4p4-fv5q: Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrar↗2022-04-29
CVEList▶
CVE-2003-0715: Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrar↗2003-09-12