10.15.2003 - MS03-045: Buffer Overrun in the ListBox and in the ComboBox Control Could Allow Code Execution (824141)

A vulnerability exists because the ListBox control and the ComboBox control both call a function, which is located in the User32.dll file, that contains a buffer overrun. The function does not correctly validate the parameters that are sent from a specially-crafted Windows message. Windows messages provide a way for interactive processes to react to user events (for example, keystrokes or mouse movements) and to communicate with other interactive processes. A security vulnerability exists because the function that provides the list of accessibility options to the user does not correctly validate Windows messages that are sent to it. - Download Windows NT Workstation 4.0 SP6a Patch - Download Windows NT Server 4.0 SP6a Patch - Download Windows NT Server 4.0,Terminal Server Edition SP6 Patch - Download Windows 2000 SP2 Patch - Download Windows 2000 SP3 & SP4 Patch - Download Windows XP Gold SP1 Patch - Download Windows XP 64-Bit Edition Patch - Download Windows XP 64-Bit Edition Version 2003 Patch - Download Windows Server 2003 Patch - Download Windows Server 2003 64 bit Edition Patch - View Microsoft Security Bulletin MS03-045 - View Microsoft Knowledge Base Article - 824141 - Visit Microsoft Corporation