Login Request a demo
Unscored severity · published Jun 1, 2004
CVE-2003-0719
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4,…
–
CVSS
81.2%
EPSS
No
On KEV
Description
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)81.2% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netmeeting · Microsoft
All versions, or not specified · source: NVD
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
W2
Windows 2003 Server · Microsoft
r2 · source: NVD
W9
Windows 98 · Microsoft
All versions, or not specified · source: NVD
WM
Windows ME · Microsoft
All versions, or not specified · source: NVD
WN
Windows NT · Microsoft
4.0 · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
Affected product
NE
Netmeeting
Microsoft
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0719
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0719
Patch
http://www.kb.cert.org/vuls/id/586540
Patch
http://www.securityfocus.com/archive/1/361836
Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA04-104A.html
Patch
http://xforce.iss.net/xforce/alerts/id/168
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1093
More from Netmeeting
–
CVE-2006-2919
Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via…
–
CVE-2003-0533
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a,…
–
CVE-2004-0117
Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code
–
CVE-2003-0505
Directory traversal vulnerability in Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to read arbitrary files via "..\.." (dot dot) sequences in a file transfer…
–
CVE-2003-0506
Microsoft NetMeeting 3.01 2000 before SP4 allows remote attackers to cause a denial of service (shutdown of NetMeeting conference) via malformed packets, as demonstrated via the…