CVE-2003-0349
Microsoft Windows Media Services <5.0 - RCE
Title source: llmDescription
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
Exploits (4)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16355
exploitdb
WORKING POC
VERIFIED
by firew0rker · cremotewindows
https://www.exploit-db.com/exploits/48
exploitdb
WORKING POC
VERIFIED
by firew0rker · cremotewindows
https://www.exploit-db.com/exploits/22837
metasploit
WORKING POC
GOOD
by hdm · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/ms03_022_nsiislog_post.rb
References (7)
Scores
EPSS
0.8821
EPSS Percentile
99.5%
Details
Status
published
Products (1)
microsoft/windows_2000
Published
Jul 24, 2003
Tracked Since
Feb 18, 2026