CVE-2003-0352

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster/MSblast/LovSAN and Nachi/Welchia worms.

• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007079.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007357.html
• http://marc.info/?l=bugtraq&m=105838687731618&w=2
• http://marc.info/?l=bugtraq&m=105914789527294&w=2
• http://www.cert.org/advisories/CA-2003-16.htmlUS Government Resource
• http://www.cert.org/advisories/CA-2003-19.htmlUS Government Resource
• http://www.kb.cert.org/vuls/id/568148US Government Resource
• http://www.securityfocus.com/bid/8205Exploit, Patch, Vendor Advisory
• http://www.xfocus.org/documents/200307/2.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-026
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12629
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A194
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2343
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A296
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007079.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2003-July/007357.html
• http://marc.info/?l=bugtraq&m=105838687731618&w=2
• http://marc.info/?l=bugtraq&m=105914789527294&w=2
• http://www.cert.org/advisories/CA-2003-16.htmlUS Government Resource
• http://www.cert.org/advisories/CA-2003-19.htmlUS Government Resource
• http://www.kb.cert.org/vuls/id/568148US Government Resource
• http://www.securityfocus.com/bid/8205Exploit, Patch, Vendor Advisory
• http://www.xfocus.org/documents/200307/2.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-026
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12629
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A194
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2343
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A296

Published

Aug 18, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0346Multiple integer overflows in a Microsoft Windows DirectX MI…
• CVE-2003-0347Heap-based buffer overflow in VBE.DLL and VBE6.DLL of Micros…
• CVE-2003-0348A certain Microsoft Windows Media Player 9 Series ActiveX co…
• CVE-2003-0349Buffer overflow in the streaming media component for logging…
• CVE-2003-0350The control for listing accessibility options in the Accessi…
• CVE-2003-0351Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0353Buffer overflow in a component of SQL-DMO for Microsoft Data…
• CVE-2003-0354Unknown vulnerability in GNU Ghostscript before 7.07 allows …
• CVE-2003-0355Safari 1.0 Beta 2 (v73) and earlier does not validate the Co…
• CVE-2003-0356Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and e…9.8
• CVE-2003-0357Multiple integer overflow vulnerabilities in Ethereal 0.9.11…
• CVE-2003-0358Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) fa…