CVE-2003-0350

The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback function.

• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0015.htmlPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=105777681615939&w=2
• http://www.ngssoftware.com/advisories/utilitymanager.txtPatch, Vendor Advisory
• http://www.securityfocus.com/bid/8154
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-025
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12543
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A451
• http://archives.neohapsis.com/archives/vulnwatch/2003-q3/0015.htmlPatch, Vendor Advisory
• http://marc.info/?l=bugtraq&m=105777681615939&w=2
• http://www.ngssoftware.com/advisories/utilitymanager.txtPatch, Vendor Advisory
• http://www.securityfocus.com/bid/8154
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-025
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12543
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A451

Published

Aug 18, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0344Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, an…
• CVE-2003-0345Buffer overflow in the SMB capability for Microsoft Windows …
• CVE-2003-0346Multiple integer overflows in a Microsoft Windows DirectX MI…
• CVE-2003-0347Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Micros…
• CVE-2003-0348A certain Microsoft Windows Media Player 9 Series ActiveX co…
• CVE-2003-0349Buffer overflow in the streaming media component for logging…
• CVE-2003-0351Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0352Buffer overflow in a certain DCOM interface for RPC in Micro…
• CVE-2003-0353Buffer overflow in a component of SQL-DMO for Microsoft Data…
• CVE-2003-0354Unknown vulnerability in GNU Ghostscript before 7.07 allows …
• CVE-2003-0355Safari 1.0 Beta 2 (v73) and earlier does not validate the Co…
• CVE-2003-0356Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and e…9.8