CVE-2003-0646

CVE-2003-0646 describes multiple buffer overflow vulnerabilities within ActiveX controls utilized by Trend Micro HouseCall versions 5.5 and 5.7, and Damage Cleanup Server 1.0. These flaws allow unauthenticated remote attackers to execute arbitrary code on affected systems by supplying excessively long parameter strings. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no public exploits, Metasploit modules, or Nuclei templates are available, and there is no evidence of active exploitation or significant community discussion, the potential for remote code execution remains a critical concern for unpatched systems.