CVE-2003-0719 Information

Description

Buffer overflow in the Private Communications Transport (PCT) protocol implementation in the Microsoft SSL library as used in Microsoft Windows NT 4.0 SP6a 2000 SP2 through SP4 XP SP1 Server 2003 NetMeeting Windows 98 and Windows ME allows remote attackers to execute arbitrary code via PCT 1.0 handshake packets.

Reference

http://www.kb.cert.org/vuls/id/586540 http://www.securityfocus.com/archive/1/361836 http://www.us-cert.gov/cas/techalerts/TA04-104A.html http://xforce.iss.net/xforce/alerts/id/168 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-011 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A1093 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A889 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A903 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A951