CVE-2003-0659

CVE-2003-0659 describes a buffer overflow vulnerability in User32.dll affecting Microsoft Windows NT through Server 2003. This flaw allows a local attacker to execute arbitrary code by sending specially crafted long LB_DIR or CB_DIR messages to ListBox or ComboBox controls within a privileged application. With a CVSS score of 7.2, this vulnerability is considered high severity due to its low attack complexity and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, and it has garnered some community discussion and media coverage, indicating awareness of its potential.