← back
CVE-2003-0719

CVE-2003-0719

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 81%
from disclosure to weapon5 days
Published on NVDApr 16
1st PoC+5d
metasploitApr 13
exploitation probability
81%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/275unverifiedexploitdbwww.exploit-db.com/exploits/16334unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1093https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A889https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A903https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A951http://www.kb.cert.org/vuls/id/586540http://www.securityfocus.com/archive/1/361836http://www.us-cert.gov/cas/techalerts/TA04-104A.htmlhttp://xforce.iss.net/xforce/alerts/id/168