CVE-2003-0109: Buffer Overflow
Published Mar 18, 2003
·Updated
Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.
Affected Software
8 affected components
Microsoft Windows 2000
Microsoft Windows 2000=sp1
Microsoft Windows 2000=sp2
Microsoft Windows 2000=sp3
Microsoft Windows 2000 Terminal Services
Microsoft Windows 2000 Terminal Services=sp1
Microsoft Windows 2000 Terminal Services=sp2
Microsoft Windows 2000 Terminal Services=sp3
Remediation
Patch Available
Patch Available
Patch Available
Event History
Mar 18, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Mar 31, 2003
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0109?
CVE-2003-0109 is classified as critical due to the potential for remote code execution.
2
How do I fix CVE-2003-0109?
To mitigate the risk of CVE-2003-0109, it is essential to apply the appropriate security patches released by Microsoft.
3
Which software is affected by CVE-2003-0109?
CVE-2003-0109 affects Microsoft Windows NT 4.0, Windows 2000, and Windows XP, particularly with IIS 5.0.
4
What type of vulnerability is CVE-2003-0109?
CVE-2003-0109 is a buffer overflow vulnerability in ntdll.dll that allows execution of arbitrary code.
5
Who could exploit CVE-2003-0109?
Remote attackers can exploit CVE-2003-0109 through specially crafted WebDAV requests.