Unscored CVE-2003-0525 EUVD-2003-0519GHSA-8857-6ch2-mpr7

The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to c…

Published Jul 25, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.

References

A072303-1 vendor-advisory
MS03-029 vendor-advisory
oval:org.mitre.oval:def:319 vdb-entry signature
winnt-file-management-dos(12701) vdb-entry