CVE-2003-0224 in Microsoft IIS
Summary
Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename, aka "Server Side Include Web Pages Buffer Overrun."
Reservation
04/30/2003
Disclosure
06/09/2003
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 84 | Microsoft IIS Server Side Includes SSINC.DLL memory corruption | 119 | Not defined | Official fix | CVE-2003-0224 |