CVE-2003-0719

Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library, as used in Microsoft Windows NT 4.0 SP6a, 2000 SP2 through SP4, XP SP1, Server 2003, NetMeeting, Windows 98, and Windows ME, allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

81.20% chance of exploitation in the next 30 days, 100th percentile

Published

2004-04-16

Updated

2024-08-08

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/ssl/ms04_011_pct.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16334
• https://www.exploit-db.com/exploits/275

References

• CVE Record
• NVD entry

Related

• CVE-2003-0718
• CVE-2003-0720
• CVE-2003-0717
• CVE-2003-0721
• CVE-2003-0714
• CVE-2003-0722