Lucene search

K
cve[email protected]CVE-2003-0719
HistoryJun 01, 2004 - 4:00 a.m.

CVE-2003-0719

2004-06-0104:00:00
web.nvd.nist.gov
48
cve-2003-0719
buffer overflow
microsoft ssl library
pct protocol
remote code execution
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.958 High

EPSS

Percentile

99.5%

Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.

Affected configurations

NVD
Node
microsoftnetmeeting
Node
microsoftwindows_2000sp2
OR
microsoftwindows_2000sp4fr
OR
microsoftwindows_2003_serverMatchr2
OR
microsoftwindows_98gold
OR
microsoftwindows_me
OR
microsoftwindows_ntMatch4.0sp6a
OR
microsoftwindows_xpsp1tablet_pc

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.958 High

EPSS

Percentile

99.5%