CVE-2003-0003: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 43.4% chance of exploitation in the next 30 days.

Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2000 Terminal Services: affected versions not specified; any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version; affected versions not specified

Published 2003-02-07. Last modified 2026-06-16.