PT-2003-2352 · Microsoft · Cmd.Exe+1

3Apa3A · Published 2003-12-31 · Updated 2017-07-29 · CVE-2003-1407

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows NT 4.0

Description A buffer overflow issue in cmd.exe may allow local users to execute arbitrary code via a long pathname argument to the cd command.

Recommendations For Windows NT 4.0, apply the necessary patch or update to fix the buffer overflow issue in cmd.exe.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2003-1407

Affected Products

Windows Nt 4.0

Cmd.Exe

References · 6

• 🔥 http://securityfocus.com/archive/1/311359 · Exploit
• 🔥 https://exploit-db.com/exploits/22245 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1407 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11329 · Note
• http://securityreason.com/securityalert/3251 · Note
• http://securityfocus.com/bid/6829 · Note