CVE-2003-0659

HIGH · CVSS 7.2 EPSS 31.84%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-11-17 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2003-0659

Severity

HIGH

CVSS

7.2

EPSS

31.84%

Windows

Original Filing — NVD Description

Buffer overflow in a function in User32.dll on Windows NT through Server 2003 allows local users to execute arbitrary code via long (1) LB_DIR messages to ListBox or (2) CB_DIR messages to ComboBox controls in a privileged application.