Skip to main content

CVE-2003-0818

7.5
CVSS v2.0 Base Score
89.65%
HIGH RiskEPSS (100th percentile)
NVD-CWE-Other

Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.

Published: 3/3/2004
Modified: 4/16/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v2 Score

7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Score (Exploitation Probability)

89.65%HIGH Exploitation Risk
100th percentile

This vulnerability has a 89.65% probability of being exploited in the next 30 days, ranking higher than 100% of all scored CVEs.

CWE Classification

NVD-CWE-Other