Vulnerability Details : CVE-2003-0350
The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback function.
Vulnerability category: Execute code
Products affected by CVE-2003-0350
- cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2003-0350
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2003-0350
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
4.6
|
MEDIUM | AV:L/AC:L/Au:N/C:P/I:P/A:P |
3.9
|
6.4
|
NIST |
References for CVE-2003-0350
-
http://marc.info/?l=bugtraq&m=105777681615939&w=2
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/12543
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A451
-
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-025
-
http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0015.html
Patch;Vendor Advisory
-
http://www.securityfocus.com/bid/8154
-
http://www.ngssoftware.com/advisories/utilitymanager.txt
Patch;Vendor Advisory
Jump to