CVE-2003-0350

CVE-2003-0350 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 (ListView) does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback function.

Learn more about our User Device Pen Test.