CVE-2003-0972
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier,...
CVE-2003-0972 is a high vulnerability (CVSS 10.0) in Gnu Screen, published December 2, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.55%, the 89th percentile. Fixed in screen 4.0.2-0.1.
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
Exploit likelihood
What each source reports
NVD Score used
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
- Record
CVE-2003-0972- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
- Record
CVE-2003-0972- Updated
- 2026-11-02
EUVDEUVD-2003-0962 No score
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
- Record
EUVD-2003-0962- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m666-c5wx-qfvx No score
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier,...
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
- Record
GHSA-m666-c5wx-qfvx- Updated
- 2026-11-02
OSV No score
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
- Record
CVE-2003-0972- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0972 No score
Integer signedness error in ansi.c for GNU screen 4.0.1 and earlier, and 3.9.15 and earlier, allows local users to execute arbitrary code via a large number of ";" (semicolon) characters in escape sequences, which leads to a buffer overflow.
- Record
DEBIAN-CVE-2003-0972- Updated
- 2026-11-02
Affected products
Affected packages
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/10539
marc.info?l=bugtraq&m=106995837813873&w=2
debian.org/security/2004/dsa-408
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000809
mandriva.com/security/advisories?name=MDKSA-2003:113
groups.yahoo.com/group/gnu-screen/message/3118
nvd.nist.gov/vuln/detail/CVE-2003-0972
github.com/advisories/GHSA-m666-c5wx-qfvx
security-tracker.debian.org/tracker/CVE-2003-0972