CVE-2003-0659

No fix known EPSS 43%

Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.

Published 2003-10-17 · CVE record · OSV

Products: microsoft windows_2000, microsoft windows_2003_server, microsoft windows_nt, microsoft windows_xp