CVE-2003-0469

Published Aug 7, 2003

Last updated 6 years ago

Overview

Description: Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D2CA1674-A8A0-479A-9D80-344D3C563A24"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E7FD818-322D-4089-A644-360C33943D29"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2D3B703C-79B2-4FA2-9E12-713AB977A880"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AA733AD2-D948-46A0-A063-D29081A56F1F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "799DA395-C7F8-477C-8BC7-5B4B88FB7503"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:server:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7C5FCE82-1E2F-49B9-B504-8C03F2BCF296"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_nt:4.0:*:terminal_server:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6E7E6AD3-5418-4FEA-84B5-833059CA880D"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "91D6D065-A28D-49DA-B7F4-38421FF86498"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References