CVE-2003-0350

CVE-2003-0350 describes a local privilege escalation vulnerability in the Accessibility Utility Manager on Microsoft Windows 2000. An attacker can exploit a flaw in how the ListView control handles Windows messages, allowing them to execute arbitrary code by sending a "Shatter" style message referencing a user-controlled callback function. This vulnerability has a CVSS score of 4.6, indicating low attack complexity and requiring local access, with potential impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.