CVE-2003-0102
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute...
CVE-2003-0102 is a medium vulnerability (CVSS 4.6) in File, published March 13, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.98%, the 80th percentile. Fixed in file 3.40-1.1.
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
CVE-2003-0102- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
CVE-2003-0102- Updated
- 2026-11-02
EUVDEUVD-2003-0098 No score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
EUVD-2003-0098- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8hj3-wvpv-xrpr No score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute...
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
GHSA-8hj3-wvpv-xrpr- Updated
- 2026-11-02
OSV No score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
CVE-2003-0102- Updated
- 2026-11-02
OSVDEBIAN-CVE-2003-0102 No score
Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly via a large entity size value in an ELF header (elfhdr.e_shentsize).
- Record
DEBIAN-CVE-2003-0102- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | File 3.x - Local Stack Overflow Code Execution (1) | 2003-03-04 |
| Exploit-DB | File 3.x - Local Stack Overflow Code Execution (2) | 2003-03-04 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
References
idefense.com/advisory/03.04.03.txt
exchange.xforce.ibmcloud.com/vulnerabilities/11469
redhat.com/support/errata/RHSA-2003-087.html
novell.com/linux/security/advisories/2003_017_file.html
securityfocus.com/bid/7008
marc.info?l=bugtraq&m=104680706201721&w=2
Show 8 moreShow less
lwn.net/Alerts/34908
debian.org/security/2003/dsa-260
kb.cert.org/vuls/id/611865
mandrakesoft.com/security/advisories?name=MDKSA-2003:030
nvd.nist.gov/vuln/detail/CVE-2003-0102
github.com/advisories/GHSA-8hj3-wvpv-xrpr
security-tracker.debian.org/tracker/CVE-2003-0102