{"api_version":"1","generated_at":"2026-07-23T07:03:11+00:00","cve":"CVE-2003-0819","urls":{"html":"https://cve.report/CVE-2003-0819","api":"https://cve.report/api/cve/CVE-2003-0819.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2003-0819","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2003-0819"},"summary":{"title":"CVE-2003-0819","description":"Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.","state":"PUBLISHED","assigner":"mitre","published_at":"2004-02-17 05:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://www.securitytracker.com/id?1008698","name":"http://www.securitytracker.com/id?1008698","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Internet Security and Acceleration Server H.323 Buffer Overflow Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/9408","name":"http://www.securityfocus.com/bid/9408","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/10611","name":"http://secunia.com/advisories/10611","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Secunia - Advisories - Microsoft ISA Server 2000 H.323 Protocol Filter Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001","name":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Microsoft Security Bulletin MS04-001 - Critical | Microsoft Docs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","name":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478","name":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Repository  /  Oval Repository","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/9406","name":"http://www.securityfocus.com/bid/9406","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Multiple Vendor H.323 Protocol Implementation Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.cert.org/advisories/CA-2004-01.html","name":"http://www.cert.org/advisories/CA-2004-01.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"],"title":"CERT Advisory CA-2004-01 Multiple H.323 Message Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.kb.cert.org/vuls/id/749342","name":"http://www.kb.cert.org/vuls/id/749342","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","US Government Resource"],"title":"US-CERT Vulnerability Note VU#749342","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2003-0819","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-0819","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2003","cve_id":"819","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"proxy_server","cpe6":"2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2003","cve_id":"819","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"microsoft","cpe5":"proxy_server","cpe6":"2.0","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T02:05:12.554Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"oval:org.mitre.oval:def:478","tags":["vdb-entry","signature","x_refsource_OVAL","x_transferred"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478"},{"name":"9406","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/9406"},{"name":"MS04-001","tags":["vendor-advisory","x_refsource_MS","x_transferred"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001"},{"name":"10611","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/10611"},{"name":"VU#749342","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred"],"url":"http://www.kb.cert.org/vuls/id/749342"},{"name":"1008698","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1008698"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm"},{"name":"CA-2004-01","tags":["third-party-advisory","x_refsource_CERT","x_transferred"],"url":"http://www.cert.org/advisories/CA-2004-01.html"},{"name":"9408","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/9408"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2004-01-13T00:00:00.000Z","descriptions":[{"lang":"en","value":"Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-12T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"oval:org.mitre.oval:def:478","tags":["vdb-entry","signature","x_refsource_OVAL"],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478"},{"name":"9406","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/9406"},{"name":"MS04-001","tags":["vendor-advisory","x_refsource_MS"],"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001"},{"name":"10611","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/10611"},{"name":"VU#749342","tags":["third-party-advisory","x_refsource_CERT-VN"],"url":"http://www.kb.cert.org/vuls/id/749342"},{"name":"1008698","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1008698"},{"tags":["x_refsource_MISC"],"url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm"},{"name":"CA-2004-01","tags":["third-party-advisory","x_refsource_CERT"],"url":"http://www.cert.org/advisories/CA-2004-01.html"},{"name":"9408","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/9408"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2003-0819","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"oval:org.mitre.oval:def:478","refsource":"OVAL","url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A478"},{"name":"9406","refsource":"BID","url":"http://www.securityfocus.com/bid/9406"},{"name":"MS04-001","refsource":"MS","url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-001"},{"name":"10611","refsource":"SECUNIA","url":"http://secunia.com/advisories/10611"},{"name":"VU#749342","refsource":"CERT-VN","url":"http://www.kb.cert.org/vuls/id/749342"},{"name":"1008698","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1008698"},{"name":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm","refsource":"MISC","url":"http://www.uniras.gov.uk/vuls/2004/006489/h323.htm"},{"name":"CA-2004-01","refsource":"CERT","url":"http://www.cert.org/advisories/CA-2004-01.html"},{"name":"9408","refsource":"BID","url":"http://www.securityfocus.com/bid/9408"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2003-0819","datePublished":"2004-01-15T05:00:00.000Z","dateReserved":"2003-09-18T00:00:00.000Z","dateUpdated":"2024-08-08T02:05:12.554Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2004-02-17 05:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:proxy_server:2.0:*:*:*:*:*:*:*","matchCriteriaId":"2F7BF233-8DE6-4DC4-B9ED-5D4A180DD8B9"},{"vulnerable":true,"criteria":"cpe:2.3:a:microsoft:proxy_server:2.0:sp1:*:*:*:*:*:*","matchCriteriaId":"CE48AD5F-D719-4D39-ACE1-53D0FE5F6525"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2003","CveId":"819","Ordinal":"1","Title":"CVE-2003-0819","CVE":"CVE-2003-0819","Year":"2003"},"notes":[{"CveYear":"2003","CveId":"819","Ordinal":"1","NoteData":"Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.","Type":"Description","Title":"CVE-2003-0819"},{"CveYear":"2003","CveId":"819","Ordinal":"2","NoteData":"2004-01-15","Type":"Other","Title":"Published"},{"CveYear":"2003","CveId":"819","Ordinal":"3","NoteData":"2018-10-12","Type":"Other","Title":"Modified"}]}}}