CVE-2003-0711: Microsoft Windows 2000

High severity, CVSS 7.5. EPSS: 37.4% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the PCHealth system in the Help and Support Center function in Windows XP and Windows Server 2003 allows remote attackers to execute arbitrary code via a long query in an HCP URL.

Affected products

• Microsoft Windows 2000: any version
• Microsoft Windows 2003 Server: version enterprise only; version enterprise_64-bit only; version r2 only; version standard only; version web only
• Microsoft Windows Me: any version
• Microsoft Windows Nt: version 4.0 only
• Microsoft Windows XP: any version

Published 2003-11-17. Last modified 2026-06-16.