CVE-2003-0003: Buffer Overflow
Published Feb 7, 2003
·Updated
Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.
Affected Software
45 affected components
Microsoft Windows 2000 Terminal Services
Microsoft Windows 2000
Microsoft Windows 2000=sp1
Microsoft Windows 2000=sp2
Microsoft Windows 2000=sp3
Microsoft Windows 2000 Terminal Services=sp1
Microsoft Windows 2000 Terminal Services=sp2
Microsoft Windows 2000 Terminal Services=sp3
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows XP
Microsoft Windows XP=gold
Microsoft Windows XP=sp1
Microsoft Windows XP
Microsoft Windows XP=sp1
Remediation
Patch Available
Patch Available
Event History
Feb 7, 2003
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-0003?
CVE-2003-0003 is classified as critical due to its potential to allow local users to execute arbitrary code.
2
How do I fix CVE-2003-0003?
To fix CVE-2003-0003, apply the specific patches released by Microsoft for affected Windows versions.
3
Which software is affected by CVE-2003-0003?
CVE-2003-0003 affects Microsoft Windows NT 4.0, Windows 2000, and Windows XP across their various service packs.
4
What type of vulnerability is CVE-2003-0003?
CVE-2003-0003 is a buffer overflow vulnerability in the RPC Locator service.
5
Can CVE-2003-0003 be exploited remotely?
No, CVE-2003-0003 requires local user access to exploit the vulnerability.