CVE-2003-0819

Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

• CWE-119

• http://secunia.com/advisories/10611
• http://www.cert.org/advisories/CA-2004-01.htmlPatch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/749342Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/9406
• http://www.securityfocus.com/bid/9408Patch, Vendor Advisory
• http://www.securitytracker.com/id?1008698
• http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478
• http://secunia.com/advisories/10611
• http://www.cert.org/advisories/CA-2004-01.htmlPatch, Third Party Advisory, US Government Resource
• http://www.kb.cert.org/vuls/id/749342Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/9406
• http://www.securityfocus.com/bid/9408Patch, Vendor Advisory
• http://www.securitytracker.com/id?1008698
• http://www.uniras.gov.uk/vuls/2004/006489/h323.htm
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478

Published

Feb 17, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2003-0813A multi-threaded race condition in the Windows RPC DCOM func…
• CVE-2003-0814Internet Explorer 6 SP1 and earlier allows remote attackers …
• CVE-2003-0815Internet Explorer 6 SP1 and earlier allows remote attackers …
• CVE-2003-0816Internet Explorer 6 SP1 and earlier allows remote attackers …
• CVE-2003-0817Internet Explorer 5.01 through 6 SP1 allows remote attackers…
• CVE-2003-0818Multiple integer overflows in Microsoft ASN.1 library (MSASN…
• CVE-2003-0820Microsoft Word 97, 98(J), 2000, and 2002, and Microsoft Work…
• CVE-2003-0821Microsoft Excel 97, 2000, and 2002 allows remote attackers t…
• CVE-2003-0822Buffer overflow in the debug functionality in fp30reg.dll of…
• CVE-2003-0823Internet Explorer 6 SP1 and earlier allows remote attackers …
• CVE-2003-0824Unknown vulnerability in the SmartHTML interpreter (shtml.dl…
• CVE-2003-0825The Windows Internet Naming Service (WINS) for Microsoft Win…