CVE-2003-0525

The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of…

published July 25, 2003

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07706 · 94.6th percentile
Published
2003-07-25T04:00Z
EPSS history
Timeline
  • 25 JUL 04:00Z
    The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of…
    cvelistv5