CVE-2003-0719
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the...
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
- Record
CVE-2003-0719- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
- Record
CVE-2003-0719- Updated
- 2026-11-02
EUVDEUVD-2003-0710 No score
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
- Record
EUVD-2003-0710- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qcv7-54h7-vffm No score
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the...
Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.
- Record
GHSA-qcv7-54h7-vffm- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Private Communications Transport - Remote Overflow (MS04-011) (Metasploit) | 2010-09-20 |
| Exploit-DB | Microsoft IIS 5.0 - SSL Remote Buffer Overflow (MS04-011) | 2004-04-21 |
| Metasploit | MS04-011 Microsoft Private Communications Transport Overflow | 2004-04-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-0719 is a high vulnerability (CVSS 7.5) in Microsoft Netmeeting, published April 16, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 81.2%, the 99th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1093
securityfocus.com/archive/1/361836
docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011
kb.cert.org/vuls/id/586540
us-cert.gov/cas/techalerts/TA04-104A.html
xforce.iss.net/xforce/alerts/id/168
Show 5 moreShow less
nvd.nist.gov/vuln/detail/CVE-2003-0719
github.com/advisories/GHSA-qcv7-54h7-vffm