high7.2Public exploit code
CVE-2003-1407
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Windows NT/2000 - 'cmd.exe' CD Buffer Overflow (PoC)2003-02-11 · dos · windows · Verified
Impact
Buffer overflow in cmd.exe in Windows NT 4.0 may allow local users to execute arbitrary code via a long pathname argument to the cd command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows Nt | Version 4.0 |