CVE-2003-0525: Medium severity Microsoft Windows NT vulnerability
The getCanonicalPath function in Windows NT 4.0 may free memory that it does not own and cause heap corruption, which allows attackers to cause a denial of service (crash) via requests that cause a long file name to be passed to getCanonicalPath, as demonstrated on the IBM JVM using a long string to the java.io.getCanonicalPath Java method.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0525?
CVE-2003-0525 has been classified as a critical vulnerability due to its potential to cause denial of service.
How do I fix CVE-2003-0525?
To mitigate CVE-2003-0525, it is recommended to apply the latest service pack updates for Windows NT 4.0.
What systems are affected by CVE-2003-0525?
CVE-2003-0525 affects Microsoft Windows NT 4.0, including various service packs and server configurations.
What is the impact of CVE-2003-0525?
The impact of CVE-2003-0525 includes heap corruption that leads to crashes and potential denial of service.
Can CVE-2003-0525 be exploited remotely?
Yes, CVE-2003-0525 can be exploited remotely by sending specially crafted requests to the affected system.