CVE-2003-0659
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 32%
from disclosure to weapon0 days
Published on NVDOct 17
1st PoCOct 15
exploitation probability
32%top 2% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.
Affected products
n/a · n/apublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/23255exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/122⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=106631999907035&w=2http://marc.info/?l=ntbugtraq&m=106632111408343&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-045https://exchange.xforce.ibmcloud.com/vulnerabilities/13424https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A201https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A340http://www.cert.org/advisories/CA-2003-27.htmlhttp://www.kb.cert.org/vuls/id/967668http://www.securityfocus.com/bid/8827