← back
CVE-2003-0349

CVE-2003-0349

EPSS 82.5%
Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft Windows Media Services (nsiislog.dll), as installed in IIS 5.0, allows remote attackers to execute arbitrary code via a large POST request to nsiislog.dll.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/16355unverifiedexploitdbwww.exploit-db.com/exploits/48unverifiedexploitdbwww.exploit-db.com/exploits/22837unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=105665030925504&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-022http://secunia.com/advisories/9115http://securitytracker.com/id?1007059https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A938http://www.kb.cert.org/vuls/id/113716http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0306&L=NTBUGTRAQ&P=R4563