CVE-2003-0003

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 43.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-09-01 · updated 2026-06-16

Description

Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2000 Terminal Services: all versions
Microsoft Windows Nt: 4.0, 4.0-sp1, 4.0-sp2, 4.0-sp3, 4.0-sp4, 4.0-sp5 (+2)
Microsoft Windows XP Service Pack 3: all versions

References

http://marc.info/?l=bugtraq&m=104394414713415&w=2
http://marc.info/?l=ntbugtraq&m=104393588232166&w=2
http://www.cert.org/advisories/CA-2003-03.html
http://www.kb.cert.org/vuls/id/610986
http://www.securityfocus.com/bid/6666
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001
https://exchange.xforce.ibmcloud.com/vulnerabilities/11132
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103
http://marc.info/?l=bugtraq&m=104394414713415&w=2
http://marc.info/?l=ntbugtraq&m=104393588232166&w=2
http://www.cert.org/advisories/CA-2003-03.html
http://www.kb.cert.org/vuls/id/610986

Get alerted when CVE-2003-0003 or the next vulnerability affects your stack