CVE-2003-0897: Medium severity Microsoft Windows XP vulnerability
Published Oct 25, 2003
·Updated
"Shatter" vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending (1) BCMGETTEXTMARGIN or (2) BCMSETTEXTMARGIN button control messages to privileged applications.
Affected Software
1 affected component
Microsoft Windows XP=gold
Event History
Oct 25, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Nov 17, 2003
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0897?
CVE-2003-0897 is considered a critical vulnerability as it allows local users to execute arbitrary code.
2
How do I fix CVE-2003-0897?
To mitigate CVE-2003-0897, users should apply security updates from Microsoft for Windows XP.
3
What software is affected by CVE-2003-0897?
CVE-2003-0897 affects the gold version of Microsoft Windows XP.
4
Who can exploit CVE-2003-0897?
CVE-2003-0897 can be exploited by local users who have access to the affected system.
5
What can attackers do with CVE-2003-0897?
Attackers can exploit CVE-2003-0897 to send specific control messages that may allow them to run arbitrary code in privileged applications.