{"id":"CVE-2003-0003","aliases":["EUVD-2003-0003","GHSA-4hj3-h8v7-rmf3"],"status":"published","title":"Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal...","description":"Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.43392,"percentile":0.98741,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2003-02-07T05:00:00Z","modified":"2026-06-16T22:01:19Z","exploits":[{"source":"exploitdb","id":"EDB-22194","title":"Microsoft Windows XP/2000/NT 4.0 - Locator Service Buffer Overflow","type":"remote","platform":"windows","date":"2003-01-22","verified":true,"url":"https://www.exploit-db.com/exploits/22194"},{"source":"exploitdb","id":"EDB-5","title":"Microsoft Windows 2000/NT 4 - RPC Locator Service Remote Overflow","type":"remote","platform":"windows","date":"2003-04-03","verified":true,"url":"https://www.exploit-db.com/exploits/5"}],"products":[{"vendor":"microsoft","product":"windows_2000"},{"vendor":"microsoft","product":"windows_2000_terminal_services"},{"vendor":"microsoft","product":"windows_nt"},{"vendor":"microsoft","product":"windows_xp"}],"references":[{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-001","tags":["vendor-advisory","x_refsource_MS","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=104394414713415\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Third Party Advisory"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A103","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/11132","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/6666","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/610986","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://www.cert.org/advisories/CA-2003-03.html","tags":["third-party-advisory","x_refsource_CERT","x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://marc.info/?l=ntbugtraq\u0026m=104393588232166\u0026w=2","tags":["mailing-list","x_refsource_NTBUGTRAQ","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0003"},{"url":"https://github.com/advisories/GHSA-4hj3-h8v7-rmf3"}],"sources":{"cve":[{"id":"CVE-2003-0003","description":"Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T01:36:25.372Z","updated_at":"2026-11-02T14:20:16.757505Z"}],"euvd":[{"id":"EUVD-2003-0003","description":"Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-08T01:36:25Z","updated_at":"2026-11-03T01:15:09.64087Z"}],"ghsa":[{"id":"GHSA-4hj3-h8v7-rmf3","title":"Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal...","description":"Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.","status":"published","published":"2022-04-29T01:25:37Z","modified":"2023-01-30T05:00:46Z","updated_at":"2026-11-02T14:46:16.34482Z"}],"nvd":[{"id":"CVE-2003-0003","description":"Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.","status":"published","published":"2003-02-07T05:00:00Z","modified":"2026-06-16T22:01:19.347Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:46.710758Z"}]}}