Buffer overflow in Microsoft Windows 2000

CVE-2003-0227

The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.

Vulnerability class: Buffer Overflow

EPSS: 0.344 (98.2th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Third Party Advisory, Issue Tracking)
  • cve@mitre.org (x_refsource_MS, vendor-advisory, Vendor Advisory)
  • cve@mitre.org (mailing-list, Third Party Advisory, x_refsource_NTBUGTRAQ, Issue Tracking)
  • cve@mitre.org (mailing-list, Third Party Advisory, x_refsource_NTBUGTRAQ, Issue Tracking)
  • cve@mitre.org (x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)