Unscored CVE-2003-0503 EUVD-2003-0497GHSA-hwcm-g6vh-x9c8

Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service…

Published Jul 4, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument.

References

20030703 [SNS Advisory No.65] Windows 2000 ShellExecute() API Let Applications to Cause Buffer Overflow mailing-list
20030703 [SNS Advisory No.65] Windows 2000 ShellExecute() API Let Applications to Cause Buffer Overflow mailing-list
http://www.lac.co.jp/security/intelligence/SNSAdvisory/65.html