VULNERABILITY INTELLIGENCE
CVE-2003-1234
CVSS score3.6 LOW
EPSS probability0.43%
CISA KEVNot currently listed
Published2003-12-31
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:N/I:P/A:P
Description
Integer overflow in the f_count counter in FreeBSD before 4.2 through 5.0 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via multiple calls to (1) fpathconf and (2) lseek, which do not properly decrement f_count through a call to fdrop.