CVE-2003-0659 Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox co...
HighCVSS 7.2
EPSS 43.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20031016 Listbox And Combobox Control Buffer Overflow mailing-list
- 20031016 Listbox And Combobox Control Buffer Overflow mailing-list
- CA-2003-27 third-party-advisory us-government-resource
- VU#967668 patch third-party-advisory us-government-resource
- 8827 patch vdb-entry vendor-advisory
- MS03-045 vendor-advisory
- win-user32-control-bo(13424) vdb-entry
- oval:org.mitre.oval:def:201 signature vdb-entry
- oval:org.mitre.oval:def:340 signature vdb-entry