vendor:
Windows
by:
Adik <netmaniac[at]hotmail.kg>
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Windows
Affected Version From: Windows XP Professional SP1 English version, Windows 2000 Professional SP3 English version
Affected Version To: Unknown
Patch Exists: YES
Related CWE: CVE-2003-0903
CPE: o:microsoft:windows
Platforms Tested: Windows XP Professional SP1 English version, Windows 2000 Professional SP3 English version
2003
Microsoft Windows Messenger Service Buffer Overflow Vulnerability
This vulnerability is a buffer overrun vulnerability in Microsoft Windows Messenger Service. It occurs due to insufficient bounds checking of messages before they are passed to an internal buffer. Exploitation of this vulnerability could lead to a denial of service or execution of malicious code in Local System context, potentially allowing for full system compromise.
Mitigation:
Apply the necessary security patch provided by Microsoft (MS03-043).