Lucene search

MitreCVE-2003-0897

HistoryNov 17, 2003 - 5:00 a.m.

CVE-2003-0897

2003-11-1705:00:00

mitre

web.nvd.nist.gov

vulnerability

shatter

commctl32.dll

windows xp

arbitrary code execution

nvd

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

Percentile

9.5%

JSON

“Shatter” vulnerability in CommCtl32.dll in Windows XP may allow local users to execute arbitrary code by sending (1) BCM_GETTEXTMARGIN or (2) BCM_SETTEXTMARGIN button control messages to privileged applications.

Affected configurations

Nvd

Node

microsoftwindows_xpgold

VendorProductVersionCPE
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::gold::::::*

References

marc.info/?l=bugtraq&m=106692772510010&w=2

exchange.xforce.ibmcloud.com/vulnerabilities/13558

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

Percentile

9.5%

JSON

Related for CVE-2003-0897