Unscored CVE-2003-0528 EUVD-2003-0522GHSA-rx7x-69jw-r2f4

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execu…

Published Sep 12, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed RPC request with a long filename parameter, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0715.

References

CA-2003-23 third-party-advisory
oval:org.mitre.oval:def:2884 vdb-entry signature
http://www.nsfocus.com/english/homepage/research/0306.htm
oval:org.mitre.oval:def:127 vdb-entry signature
20030920 The Analysis of RPC Long Filename Heap Overflow AND a Way to Write Universal Heap Overflow of Windows mailing-list
oval:org.mitre.oval:def:3966 vdb-entry signature
oval:org.mitre.oval:def:2968 vdb-entry signature
20030911 NSFOCUS SA2003-06 : Microsoft Windows RPC DCOM Interface Heap Overflow Vulnerability mailing-list
MS03-039 vendor-advisory
VU#254236 third-party-advisory