CVE-2003-0469

Buffer overflow in the HTML Converter (HTML32.cnv) on various Windows operating systems allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via cut-and-paste operation, as demonstrated in Internet Explorer 5.0 using a long "align" argument in an HR tag.

• https://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006155.html
• https://lists.grok.org.uk/pipermail/full-disclosure/2003-June/006067.html
• https://marc.info/?l=bugtraq&m=105639925122961&w=2
• https://www.cert.org/advisories/CA-2003-14.htmlUS Government Resource
• https://www.kb.cert.org/vuls/id/823260US Government Resource
• https://www.securityfocus.com/bid/8016
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-023
• https://lists.grok.org.uk/pipermail/full-disclosure/2003-July/006155.html
• https://lists.grok.org.uk/pipermail/full-disclosure/2003-June/006067.html
• https://marc.info/?l=bugtraq&m=105639925122961&w=2
• https://www.cert.org/advisories/CA-2003-14.htmlUS Government Resource
• https://www.kb.cert.org/vuls/id/823260US Government Resource
• https://www.securityfocus.com/bid/8016
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-023

Published

Aug 7, 2003

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0463Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2003-0464The RPC code in Linux kernel 2.4 sets the reuse flag when so…
• CVE-2003-0465The kernel strncpy function in Linux 2.4 and 2.5 does not %N…
• CVE-2003-0466Off-by-one error in the fb_realpath() function, as derived f…9.8
• CVE-2003-0467Unknown vulnerability in ip_nat_sack_adjust of Netfilter in …
• CVE-2003-0468Postfix 1.1.11 and earlier allows remote attackers to use Po…
• CVE-2003-0470Buffer overflow in the "RuFSI Utility Class" ActiveX control…
• CVE-2003-0471Buffer overflow in WebAdmin.exe for WebAdmin allows remote a…
• CVE-2003-0472The IPv6 capability in IRIX 6.5.19 allows remote attackers t…
• CVE-2003-0473Unknown vulnerability in the IPv6 capability in IRIX 6.5.19 …
• CVE-2003-0474Directory traversal vulnerability in iWeb Server allows remo…
• CVE-2003-0475Directory traversal vulnerability in iWeb Server 2 allows re…