CVE-2003-0227

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The logging capability for unicast and multicast transmissions in the ISAPI extension for Microsoft Windows Media Services in Microsoft Windows NT 4.0 and 2000, nsiislog.dll, allows remote attackers to cause a denial of service in Internet Information Server (IIS) and execute arbitrary code via a certain network request.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=105427615626177&w=2Issue Tracking, Third Party Advisory
http://marc.info/?l=ntbugtraq&m=105421127531558&w=2Issue Tracking, Third Party Advisory
http://marc.info/?l=ntbugtraq&m=105421176432011&w=2Issue Tracking, Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-019Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A936Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A966Third Party Advisory
http://marc.info/?l=bugtraq&m=105427615626177&w=2Issue Tracking, Third Party Advisory
http://marc.info/?l=ntbugtraq&m=105421127531558&w=2Issue Tracking, Third Party Advisory
http://marc.info/?l=ntbugtraq&m=105421176432011&w=2Issue Tracking, Third Party Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-019Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A936Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A966Third Party Advisory

Timeline

Published: Jun 9, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-02287.5Directory traversal vulnerability in Microsoft Windows Media Player 7.1 and Windows Media Player for Windows XP allows remote attackers to e CVE-2003-02307.2Microsoft SQL Server 7, 2000, and MSDE allows local users to gain privileges by hijacking a named pipe during the authentication of another CVE-2003-02315.0Microsoft SQL Server 7, 2000, and MSDE allows local or remote authenticated users to cause a denial of service (crash or hang) via a long re CVE-2003-02327.2Microsoft SQL Server 7, 2000, and MSDE allows local users to execute arbitrary code via a certain request to the Local Procedure Calls (LPC)CVE-2003-02337.5Heap-based buffer overflow in plugin.ocx for Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute arbitrary code via the L CVE-2003-02357.5Format string vulnerability in POP3 client for Mirabilis ICQ Pro 2003a allows remote malicious servers to execute arbitrary code via format CVE-2003-02367.5Integer signedness errors in the POP3 client for Mirabilis ICQ Pro 2003a allow remote attackers to execute arbitrary code via the (1) Subjec CVE-2003-02377.5The "ICQ Features on Demand" functionality for Mirabilis ICQ Pro 2003a does not properly verify the authenticity of software upgrades, which CVE-2003-02385.0The Message Session window in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service (CPU consumption) by spoofing the CVE-2003-02395.0icqateimg32.dll parsing/rendering library in Mirabilis ICQ Pro 2003a allows remote attackers to cause a denial of service via malformed GIF8 CVE-2003-024010.0The web-based administration capability for various Axis Network Camera products allows remote attackers to bypass access restrictions and m CVE-2003-02417.5FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or ot