CVE-2003-0470: Symantec Security Check

High severity, CVSS 7.5. EPSS: 8.7% chance of exploitation in the next 30 days.

Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings.

Affected products

• Symantec Security Check: any version

Published 2003-08-07. Last modified 2026-06-16.