# CVE-2003-0818

## Summary

- **CVE ID:** CVE-2003-0818
- **Severity:** UNKNOWN
- **CVSS Score:** 3.59
- **CWE:** N/A
- **Published:** Feb 11, 2004
- **Last Modified:** Mar 16, 2026

## Description

Multiple integer overflows in Microsoft ASN.1 library (MSASN1.DLL), as used in LSASS.EXE, CRYPT32.DLL, and other Microsoft executables and libraries on Windows NT 4.0, 2000, and XP, allow remote attackers to execute arbitrary code via ASN.1 BER encodings with (1) very large length fields that cause arbitrary heap data to be overwritten, or (2) modified bit strings.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://www.kb.cert.org/vuls/id/583108)
- [CNA](http://www.us-cert.gov/cas/techalerts/TA04-041A.html)
- [CNA](https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A653)
- [CNA](http://marc.info/?l=bugtraq&m=107643836125615&w=2)
- [CNA](http://marc.info/?l=bugtraq&m=107643892224825&w=2)
- [CNA](https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A799)
- [CNA](https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A796)
- [CNA](http://www.kb.cert.org/vuls/id/216324)
- [CNA](https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-007)
- [CNA](http://marc.info/?l=ntbugtraq&m=107650972723080&w=2)
- [CNA](http://marc.info/?l=ntbugtraq&m=107650972617367&w=2)
- [CNA](https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A797)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 89.65%
- **EPSS Percentile:** 99.5

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-19._