CVE-2003-0349
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for...
CVE-2003-0349 is a high vulnerability (CVSS 7.5) in Microsoft Windows 2000, published June 28, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 80.3%, the 99th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 80.3%EPSS, 99th percentile
- Exploitation
- None known4 public exploits
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Microsoft Windows NT 4.0/2000 - Media Services 'nsiislog.dll' Remote Buffer Overflow | 2003-06-25 |
| Metasploit | MS03-022 Microsoft IIS ISAPI nsiislog.dll ISAPI POST Overflow | 2003-06-25 |
| Exploit-DB | Microsoft Windows Media Services - Remote (MS03-022) | 2003-07-01 |
| Exploit-DB | Microsoft IIS - ISAPI 'nsiislog.dll' ISAPI POST Overflow (MS03-022) (Metasploit) | 2010-07-25 |
What each source reports
NVD Score used
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
- Record
CVE-2003-0349- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
- Record
CVE-2003-0349- Updated
- 2026-11-02
EUVDEUVD-2003-0344No score
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
- Record
EUVD-2003-0344- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vg7r-f2jg-5449No score
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for...
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
- Record
GHSA-vg7r-f2jg-5449- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
marc.info?l=bugtraq&m=105665030925504&w=2
secunia.com/advisories/9115
kb.cert.org/vuls/id/113716
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938
docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022
ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563
securitytracker.com/id?1007059
nvd.nist.gov/vuln/detail/CVE-2003-0349
github.com/advisories/GHSA-vg7r-f2jg-5449