## https://sploitus.com/exploit?id=SAINT:0DCCF88BC69F584F4462E15AE16238D3
Added: 04/04/2006
CVE: [CVE-2003-0352](<https://vulners.com/cve/CVE-2003-0352>)
BID: [8205](<http://www.securityfocus.com/bid/8205>)
OSVDB: [2100](<http://www.osvdb.org/2100>)
### Background
The Distributed [Component Object Model](<http://www.microsoft.com/com/default.mspx>) is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call (RPC) is a protocol used to request a service from a program on another computer.
### Problem
Insufficient input validation in the Windows RPCSS service leads to a buffer overflow in the DCOM process, leading to command execution.
### Resolution
Install the patch referenced in [Microsoft Security Bulletin 03-026](<http://www.microsoft.com/technet/security/bulletin/MS03-026.mspx>).
### References
<http://www.cert.org/advisories/CA-2003-16.html>
### Limitations
This exploit may cause the target system to crash.
### Platforms
Windows 2000
Windows XP
Windows Server 2003