CVE-2003-1407 Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
HighCVSS 7.2
EPSS 3.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows nt | = 4.0 | No fix listed |
References
- 3251 third-party-advisory
- 20030211 SECURITY.NNOV: Windows NT 4.0/2000 cmd.exe long path buffer overflow/DoS exploit mailing-list
- 6829 vdb-entry
- win-cmd-cd-bo(11329) vdb-entry