CVE-2003-0719 Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003,...
HighCVSS 7.5
EPSS 81.2%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft netmeeting | All versions | No fix listed |
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows me | All versions | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- VU#586540 patch third-party-advisory us-government-resource
- 20040430 A technical description of the SSL PCT vulnerability (CVE-2003-0719) mailing-list patch vendor-advisory
- TA04-104A third-party-advisory us-government-resource
- 20040413 Microsoft SSL Library Remote Compromise Vulnerability patch third-party-advisory vendor-advisory
- MS04-011 vendor-advisory
- oval:org.mitre.oval:def:1093 signature vdb-entry
- oval:org.mitre.oval:def:889 signature vdb-entry
- oval:org.mitre.oval:def:903 signature vdb-entry
- oval:org.mitre.oval:def:951 signature vdb-entry