CVE-2003-0525 | BDVDB-2026-5708 Detail

Description#

The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.atstake.com/research/advisories/2003/a072303-1.txt
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-029
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A319
https://exchange.xforce.ibmcloud.com/vulnerabilities/12701

Exploit#

No public exploit known

History#

Version 12003-07-25Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.