CVE-2003-0224: Buffer Overflow
Published May 30, 2003
·Updated
Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."
Affected Software
1 affected component
Microsoft Internet Information Services=5.0
Event History
May 30, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Jun 9, 2003
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0224?
CVE-2003-0224 has a moderate severity rating due to the potential for local users to execute arbitrary code.
2
How do I fix CVE-2003-0224?
To fix CVE-2003-0224, apply the latest security updates and patches provided by Microsoft for IIS 5.0.
3
What systems are affected by CVE-2003-0224?
CVE-2003-0224 specifically affects Microsoft Internet Information Services 5.0.
4
Can CVE-2003-0224 be exploited remotely?
CVE-2003-0224 typically requires local access to the system for exploitation.
5
What is the nature of the vulnerability in CVE-2003-0224?
CVE-2003-0224 is a buffer overflow vulnerability related to Server Side Include (SSI) directives.