CVE-2003-0806

CVE-2003-0806 describes a critical buffer overflow vulnerability within the Windows logon process (winlogon) affecting Microsoft Windows NT 4.0 SP6a, 2000 SP2-SP4, and XP SP1 when configured as a domain member. This flaw allows unauthenticated remote attackers to execute arbitrary code on vulnerable systems. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P) and a FAUCET Risk Score of 97/100, it represents a high-severity threat due to its network-based attack vector, low attack complexity, and potential for complete compromise. While no active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion has been identified, its high EPSS score suggests a non-trivial probability of exploitation.