CVE-2003-0503: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

Buffer overflow in the ShellExecute API function of SHELL32.DLL in Windows 2000 before SP4 may allow attackers to cause a denial of service or execute arbitrary code via a long third argument.

Affected products

• Microsoft Windows 2000: any version

Published 2003-08-07. Last modified 2026-06-16.