Unscored CVE-2003-0715 EUVD-2003-0706GHSA-79xx-p4p4-fv5q

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execu…

Published Sep 12, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Heap-based buffer overflow in the Distributed Component Object Model (DCOM) interface in the RPCSS Service allows remote attackers to execute arbitrary code via a malformed DCERPC DCOM object activation request packet with modified length fields, a different vulnerability than CVE-2003-0352 (Blaster/Nachi) and CVE-2003-0528.

References

VU#483492 third-party-advisory
CA-2003-23 third-party-advisory
oval:org.mitre.oval:def:1813 vdb-entry signature
oval:org.mitre.oval:def:20 vdb-entry signature
oval:org.mitre.oval:def:1202 vdb-entry signature
oval:org.mitre.oval:def:4224 vdb-entry signature
oval:org.mitre.oval:def:264 vdb-entry signature
20030910 EEYE: Microsoft RPC Heap Corruption Vulnerability - Part II mailing-list
MS03-039 vendor-advisory