PT-2004-1167 · Microsoft · Windows Nt 4.0+3

Derek Soeder + 1 · Published 2004-02-11 · Updated 2019-04-30 · CVE-2003-0818

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows NT 4.0 Windows 2000 Windows XP

Description The issue is related to multiple integer overflows in the Microsoft ASN.1 library, which can be exploited by remote attackers to execute arbitrary code. This is achieved through ASN.1 BER encodings with very large length fields, causing arbitrary heap data to be overwritten, or through modified bit strings.

Recommendations For Windows NT 4.0, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library. For Windows 2000, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library. For Windows XP, apply the necessary patch to fix the integer overflows in the Microsoft ASN.1 library.

Exploit

Fix

Related Identifiers

CVE-2003-0818

Affected Products

Asn.1 Library

Windows 2000

Windows Nt 4.0

Windows Xp

References · 17

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms04_007_killbill.rb · Exploit
• 🔥 https://exploit-db.com/exploits/153 · Exploit
• 🔥 https://exploit-db.com/exploits/3022 · Exploit
• 🔥 https://exploit-db.com/exploits/16377 · Exploit
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-0818 · Security Note
• http://marc.info/?l=ntbugtraq&m=107650972723080&w=2 · Note
• http://marc.info/?l=bugtraq&m=107643892224825&w=2 · Note
• http://kb.cert.org/vuls/id/583108 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A653 · Note
• http://marc.info/?l=bugtraq&m=107643836125615&w=2 · Note
• http://marc.info/?l=ntbugtraq&m=107650972617367&w=2 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A797 · Note
• http://us-cert.gov/cas/techalerts/TA04-041A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A796 · Note