Exploitation Summary
EIP tracks 1 public exploit for CVE-2003-0470. PoCs published by Cesar Cerrudo.
AI-analyzed exploit summary This exploit targets a boundary condition error in the RuFSI Utility Class ActiveX control. By invoking the CompareVersionStrings method with long strings, it can trigger a buffer overflow, potentially leading to arbitrary code execution with the privileges of the user running the web browser.
Description
Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings.
Exploits (1)
This exploit targets a boundary condition error in the RuFSI Utility Class ActiveX control. By invoking the CompareVersionStrings method with long strings, it can trigger a buffer overflow, potentially leading to arbitrary code execution with the privileges of the user running the web browser.