CVE-2003-0227 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 34.4% (pctl 98)
Patch early
A public exploit exists.
Description
The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| EPSS | 34.4% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2003-06-09 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| microsoft | windows 2000 |
| microsoft | windows nt |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Windows Media Services - 'nsiislog.dll' Remote Overflow | 2003-07-14 |
References
- http://marc.info/?l=bugtraq&m=105427615626177&w=2
- http://marc.info/?l=ntbugtraq&m=105421127531558&w=2
- http://marc.info/?l=ntbugtraq&m=105421176432011&w=2
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-019
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A936
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A966
- http://marc.info/?l=bugtraq&m=105427615626177&w=2
- http://marc.info/?l=ntbugtraq&m=105421127531558&w=2
- http://marc.info/?l=ntbugtraq&m=105421176432011&w=2
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-019
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A936
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A966
→ the Explorer · watch your stack · NVD