CVE-2003-0109: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 85.7% chance of exploitation in the next 30 days.

Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute arbitrary code, as demonstrated via a WebDAV request to IIS 5.0.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2000 Terminal Services: any version

Published 2003-03-31. Last modified 2026-06-16.