CVE-2003-0717

Messenger Service - Buffer Overflow

Title source: llm

Description

The Messenger Service for Windows NT through Server 2003 does not properly verify the length of the message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

Exploits (4)

exploitdb WORKING POC VERIFIED
by VeNoMouS · cdoswindows
https://www.exploit-db.com/exploits/385
exploitdb WORKING POC VERIFIED
by MrNice · cremotewindows
https://www.exploit-db.com/exploits/135
exploitdb WORKING POC VERIFIED
by Adik · cremotewindows
https://www.exploit-db.com/exploits/23247
exploitdb WORKING POC VERIFIED
by LSD-PLaNET · cdoswindows
https://www.exploit-db.com/exploits/111

Scores

EPSS 0.8576
EPSS Percentile 99.4%

Details

Status published
Products (9)
microsoft/windows_2000 (5 CPE variants)
microsoft/windows_2003_server enterprise
microsoft/windows_2003_server enterprise_64-bit
microsoft/windows_2003_server r2 (2 CPE variants)
microsoft/windows_2003_server standard
microsoft/windows_2003_server web
microsoft/windows_me
microsoft/windows_nt 4.0 (31 CPE variants)
microsoft/windows_xp (5 CPE variants)
Published Nov 17, 2003
Tracked Since Feb 18, 2026