Test ID:	1.3.6.1.4.1.25623.1.0.11885
Category:	Windows : Microsoft Bulletins
Title:	Buffer Overrun in the ListBox and in the ComboBox (824141)
Summary:	A vulnerability exists because the ListBox control and the ComboBox control; both call a function, which is located in the User32.dll file, that contains a buffer overrun.
Description:	Summary: A vulnerability exists because the ListBox control and the ComboBox control both call a function, which is located in the User32.dll file, that contains a buffer overrun. Vulnerability Impact: An attacker who had the ability to log on to a system interactively could run a program that could send a specially-crafted Windows message to any applications that have implemented the ListBox control or the ComboBox control, causing the application to take any action an attacker specified. An attacker must have valid logon credentials to exploit the vulnerability. This vulnerability could not be exploited remotely. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2003-0659 BugTraq ID: 8827 http://www.securityfocus.com/bid/8827 Bugtraq: 20031016 Listbox And Combobox Control Buffer Overflow (Google Search) http://marc.info/?l=bugtraq&m=106631999907035&w=2 http://www.cert.org/advisories/CA-2003-27.html CERT/CC vulnerability note: VU#967668 http://www.kb.cert.org/vuls/id/967668 Microsoft Security Bulletin: MS03-045 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-045 http://marc.info/?l=ntbugtraq&m=106632111408343&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A201 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A340 XForce ISS Database: win-user32-control-bo(13424) https://exchange.xforce.ibmcloud.com/vulnerabilities/13424
Copyright	Copyright (C) 2003 Jeff Adams

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.