CVE-2003-0908

CVE-2003-0908 describes a local privilege escalation vulnerability in Microsoft Windows 2000's Utility Manager. An attacker could exploit this by using a "Shatter" style attack, specifically manipulating the winhlp32.exe process, to execute arbitrary code with system privileges. This vulnerability carries a high CVSS score of 7.2, indicating a critical impact with full confidentiality, integrity, and availability compromise possible from a local attack. While not in the KEV catalog, exploit code for this issue (EDB-271) exists, though there is no evidence of active exploitation or significant community discussion.