Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2003-0717 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Windows 2003 Server
9 documents5 sources
Severity
7.5HIGHNVD
EPSS
85.8%
top 0.62%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedNov 17
Latest updateApr 29
Description
The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS vector
AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4
Affected Packages2 packages
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-w2mp-859x-7jh2: The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute↗2022-04-29
CVEList▶
CVE-2003-0717: The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute↗2003-10-17