CVE-2003-0470

CVE-2003-0470 describes a buffer overflow vulnerability in the "RuFSI Utility Class" ActiveX control, specifically the "RuFSI Registry Information Class," utilized by the Symantec Security Check service. This flaw allows remote attackers to execute arbitrary code by providing an excessively long argument to the CompareVersionStrings function. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog or showing active exploitation, public exploit code exists on ExploitDB, and its FAUCET Risk Score of 97/100 indicates significant potential for exploitation.