CVE-2003-0003

high

Description

Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.

References

Advisories
More

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103

https://exchange.xforce.ibmcloud.com/vulnerabilities/11132

http://www.securityfocus.com/bid/6666

http://www.kb.cert.org/vuls/id/610986

http://www.cert.org/advisories/CA-2003-03.html

http://marc.info/?l=ntbugtraq&m=104393588232166&w=2

http://marc.info/?l=bugtraq&m=104394414713415&w=2

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001

Details

Source: Mitre, NVD

Published: 2003-02-07

Updated: 2025-04-03

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.23993