CVE-2003-0525

CVE-2003-0525

Publicada em · Atualizada em

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 7.7%
probabilidade de exploração
7.7%top 5% das CVEs
exploração observada
nãonenhuma fonte reporta
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.
Produtos afetados
n/a · n/a
Referências
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-029https://exchange.xforce.ibmcloud.com/vulnerabilities/12701https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A319http://www.atstake.com/research/advisories/2003/a072303-1.txt