CVE-2003-0662

CVE-2003-0662 describes a critical buffer overflow vulnerability within the Troubleshooter ActiveX Control (Tshoot.ocx) in Microsoft Windows 2000 SP4 and earlier. This flaw allows remote attackers to execute arbitrary code on a vulnerable system by providing a specially crafted, long argument to the RunQuery2 method within an HTML document. With a CVSS score of 9.3, this vulnerability is highly severe, requiring no authentication and having a high impact on confidentiality, integrity, and availability, though it has a medium attack complexity. Despite its high severity and EPSS score, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.