CVE-2003-0711: Buffer Overflow
Published Oct 17, 2003
·Updated
Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL.
Affected Software
48 affected components
Microsoft Windows 2000
Microsoft Windows 2000=sp1
Microsoft Windows 2000=sp2
Microsoft Windows 2000=sp3
Microsoft Windows 2000=sp4
Microsoft Windows 2003 Server=enterprise
Microsoft Windows 2003 Server=enterprise_64-bit
Microsoft Windows 2003 Server=r2
Microsoft Windows 2003 Server=r2
Microsoft Windows 2003 Server=standard
Microsoft Windows 2003 Server=web
Microsoft Windows ME
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp1
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp2
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp3
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp4
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp5
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows NT=4.0-sp6a
Microsoft Windows XP
Microsoft Windows XP
Microsoft Windows XP=gold
Microsoft Windows XP=sp1
Microsoft Windows XP=sp1
Remediation
Patch Available
Patch Available
Event History
Oct 17, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Nov 17, 2003
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0711?
CVE-2003-0711 is considered critical due to its potential to allow remote attackers to execute arbitrary code.
2
How do I fix CVE-2003-0711?
To fix CVE-2003-0711, apply the appropriate security patches provided by Microsoft for the affected versions of Windows.
3
What are the affected systems for CVE-2003-0711?
CVE-2003-0711 affects Windows XP, Windows Server 2003, and various versions of Windows NT.
4
Can CVE-2003-0711 be exploited remotely?
Yes, CVE-2003-0711 can be exploited remotely via a specially crafted HCP URL.
5
Is there a workaround for CVE-2003-0711?
Disabling the Help and Support Center can act as a temporary workaround for CVE-2003-0711 until a fix is applied.