Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrar…

published 2004-01-15 22 y ago modified 2026-06-16 4 mo ago also EUVD-2003-0810

cvss: 10.0; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 40.9%; EPSS 40.9% chance of exploitation in 30 days, percentile 98%
public exploits: 0; none known

Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

Patch / fix

links 3

kb.cert.org/vuls/id/749342 advisory
cert.org/advisories/CA-2004-01.html advisory
securityfocus.com/bid/9408 advisory

Exploit prediction

40.87% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
NVD	2.0	10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

kb.cert.org /vuls/id/749342
third-party-advisory, patch, us-government-resource
cert.org /advisories/CA-2004-01.html
third-party-advisory, patch, us-government-resource
securityfocus.com /bid/9408
vdb-entry, patch, vendor-advisory
docs.microsoft.com /en-us/security-updates/securitybulletins/2004/ms04-001
vendor-advisory
oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478
vdb-entry, signature
securityfocus.com /bid/9406
vdb-entry
secunia.com /advisories/10611
third-party-advisory
securitytracker.com /id?1008698
vdb-entry
uniras.gov.uk /vuls/2004/006489/h323.htm

Sources

CVE List CVE-2003-0819
NVD CVE-2003-0819

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary