CVE-2003-0227

CVE-2003-0227 describes a denial-of-service and arbitrary code execution vulnerability in the nsiislog.dll ISAPI extension for Microsoft Windows Media Services in Windows NT 4.0 and 2000. This flaw allows remote attackers to disrupt Internet Information Server (IIS) and potentially execute malicious code through a specially crafted network request. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity and no authentication required, leading to potential partial availability impact. While not listed in CISA's KEV catalog, an exploit for this vulnerability is publicly available on ExploitDB, though there is no evidence of widespread active exploitation or significant community discussion.