Vulnerability Name: | CVE-2003-0503 (CCN-12493) | ||||||||
Assigned: | 2003-07-03 | ||||||||
Published: | 2003-07-03 | ||||||||
Updated: | 2016-10-18 | ||||||||
Summary: | Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument. | ||||||||
CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Gain Access | ||||||||
References: | Source: MITRE Type: CNA CVE-2003-0503 Source: BUGTRAQ Type: UNKNOWN 20030703 [SNS Advisory No.65] Windows 2000 ShellExecute() API Let Applications to Cause Buffer Overflow Source: NTBUGTRAQ Type: UNKNOWN 20030703 [SNS Advisory No.65] Windows 2000 ShellExecute() API Let Applications to Cause Buffer Overflow Source: CCN Type: SNS Advisory No.65 Windows 2000 ShellExecute() API Let Applications to Cause Buffer Overflow Source: MISC Type: UNKNOWN http://www.lac.co.jp/security/intelligence/SNSAdvisory/65.html Source: CCN Type: OSVDB ID: 13408 Microsoft Windows SHELL32.DLL ShellExecute API Function Overflow Source: CCN Type: SecuriTeam Mailing List, Windows NT focus 3 Jul 2003 Windows 2000 ShellExecute() API Lets Applications to Cause a Buffer Overflow Source: CCN Type: BID-8090 Microsoft Windows 2000 ShellExecute() Buffer Overflow Vulnerability Source: XF Type: UNKNOWN win2k-shell32dll-shellexecute-bo(12493) | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: ![]() | ||||||||
BACK |