CVE-2003-1407

CVE-2003-1407 describes a buffer overflow vulnerability in cmd.exe affecting Microsoft Windows NT 4.0. This flaw allows a local attacker to execute arbitrary code by providing an excessively long pathname argument to the 'cd' command. With a CVSS score of 7.2, this vulnerability is considered high severity, enabling complete compromise of confidentiality, integrity, and availability with low attack complexity. While not observed in active exploitation (KEV list), proof-of-concept exploit code is publicly available on ExploitDB, though there is no significant community discussion or media coverage surrounding this older vulnerability.