Unscored severity · published Aug 27, 2003
CVE-2003-0525
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via…
–
CVSS
7.7%
EPSS
No
On KEV
Description
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.7% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WN
Windows NT · Microsoft
4.0; 4.0; 4.0; 4.0; 4.0; 4.0; +17 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-0525
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-0525
Vendor Advisory
http://www.atstake.com/research/advisories/2003/a072303-1.txt
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-029
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/12701
oval.cisecurity.org
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A319
More from Windows NT
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability
7.8
CVE-2002-0367
Microsoft Windows Privilege Escalation Vulnerability
9.8
CVE-2002-0391
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to…
9.8
CVE-2000-1218
The default configuration for the domain name resolver for Microsoft Windows 98, NT 4.0, 2000, and XP sets the QueryIpMatching parameter to 0, which causes Windows to accept DNS…
9.1
CVE-1999-0511
IP forwarding is enabled on a machine which is not a router or firewall