CVE-2003-0525
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as…
Does this matter?
Lower severity and a low EPSS score (7.71%). Track it; it rarely justifies an emergency change on its own.
Description
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 7.71% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/windows nt
- Source
- cve@mitre.org
References
- http://www.atstake.com/research/advisories/2003/a072303-1.txtVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-029
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12701
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A319
- http://www.atstake.com/research/advisories/2003/a072303-1.txtVendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-029
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12701
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A319
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.