Back to search
CVE-2003-0525
Published: Jul 25, 2003
Modified: Aug 8, 2024
PUBLISHED
Description
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
A072303-1
vendor-advisory
x_refsource_ATSTAKE
MS03-029
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:319
vdb-entry
signature
x_refsource_OVAL
winnt-file-management-dos(12701)
vdb-entry
x_refsource_XF
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now