Vulnerability in Microsoft Netmeeting
CVE-2003-0533
Stack-based buffer overflow in certain Active Directory service functions in LSASRV.DLL of the Local Security Authority Subsystem Service (LSASS) in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Wind…
EPSS: 0.857 (99.7th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Netmeeting
- Microsoft Windows_2000
- Microsoft Windows_2003_server — versions r2
- Microsoft Windows_98
- Microsoft Windows_me
- Microsoft Windows_nt — versions 4.0
- Microsoft Windows_xp
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_FULLDISC)
- cve@mitre.org (government-resource, x_refsource_CIAC, third-party-advisory)
- cve@mitre.org (x_refsource_EEYE, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_MS, vendor-advisory)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (x_refsource_OVAL, signature, vdb-entry)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2003-0533?
- CVE-2003-0533 is a vulnerability in Microsoft Netmeeting. Published 2004-06-01.
- Is CVE-2003-0533 known to be exploited?
- 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.