Exploitation Summary
EIP tracks 2 public exploits for CVE-2003-0659. PoCs published by xCrZx, Brett Moore.
AI-analyzed exploit summary This is a functional local exploit for CVE-2003-0659 targeting a buffer overflow vulnerability in Windows ListBox/ComboBox controls. It uses a bind shell payload to achieve remote code execution by manipulating message handling in vulnerable applications.
Description
Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.
Exploits (2)
This is a functional local exploit for CVE-2003-0659 targeting a buffer overflow vulnerability in Windows ListBox/ComboBox controls. It uses a bind shell payload to achieve remote code execution by manipulating message handling in vulnerable applications.
This exploit demonstrates a local buffer overflow vulnerability in an undisclosed User32.dll function used by ListBox or ComboBox controls. The code creates a window with a ListBox control, which can be manipulated to trigger the overflow when specific Windows messages are sent.