Microsoft Security Advisory MS03-045 – An attacker who had the ability to log on to a system interactively could run a program that could send a specially-crafted Windows message to any applications that have implemented the ListBox control or the ComboBox control, causing the application to take any action an attacker specified. This could give an attacker complete control over the system by using Utility Manager in Windows 2000.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31829/MS03-045
Source: https://packetstormsecurity.com/files/31829/MS03-045.html