CVE-2003-0812

CVE-2003-0812 describes a stack-based buffer overflow in the Windows Workstation Service (WKSSVC.DLL) affecting Microsoft Windows 2000 and XP. This vulnerability allows unauthenticated remote attackers to execute arbitrary code by sending RPC calls that generate excessively long entries in the "NetSetup.LOG" debug file, specifically demonstrated using the NetAddAlternateComputerName API. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, exploit code is publicly available through multiple Metasploit modules and ExploitDB entries, indicating a high likelihood of exploitation. Despite its age and the availability of exploits, there is no recorded community discussion or media coverage for this CVE.