CVE-2003-0470 Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary cod...
HighCVSS 7.5
EPSS 8.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec security check | All versions | No fix listed |
References
- 20030622 Symantec ActiveX control buffer overflow mailing-list
- 20030624 [Symantec Security Advisor] Symantec Security Check ActiveX Buffer Overflow mailing-list
- 9091 third-party-advisory
- 1007029 vdb-entry
- VU#527228 third-party-advisory us-government-resource
- 8008 vdb-entry
- symantec-security-activex-bo(12423) vdb-entry