CVE-2003-0349

Microsoft Windows Media Services <5.0 - RCE

Title source: llm

Description

Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.

Exploits (4)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16355
exploitdb WORKING POC VERIFIED
by firew0rker · cremotewindows
https://www.exploit-db.com/exploits/48
exploitdb WORKING POC VERIFIED
by firew0rker · cremotewindows
https://www.exploit-db.com/exploits/22837
metasploit WORKING POC GOOD
by hdm · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/ms03_022_nsiislog_post.rb

Scores

EPSS 0.8821
EPSS Percentile 99.5%

Details

Status published
Products (1)
microsoft/windows_2000
Published Jul 24, 2003
Tracked Since Feb 18, 2026