$ cve CVE-2003-0719 JSON

CVE-2003-0719 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 81.2% (pctl 100)

Patch early

A public exploit exists.

Description

Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	81.2% — more likely to be exploited than 100% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2004-06-01
Last modified	2026-06-16

Affected (7)

Vendor	Product
microsoft	netmeeting
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows 98
microsoft	windows me
microsoft	windows nt
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Private Communications Transport - Remote Overflow (MS04-011) (Metasploit)	2010-09-20
exploit-db	Microsoft IIS 5.0 - SSL Remote Buffer Overflow (MS04-011)	2004-04-21

References

→ the Explorer · watch your stack · NVD