CVE-2004-0568 HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote at...
HighCVSS 10.0
EPSS 35.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = datacenter_64-bit-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = r2-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = standard-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 2003 server | = web-sp1_beta_1 | No fix listed |
| Microsoft windows nt | = 4.0 | No fix listed |
| Microsoft windows nt | = 4.0-sp1 | No fix listed |
| Microsoft windows nt | = 4.0-sp2 | No fix listed |
| Microsoft windows nt | = 4.0-sp3 | No fix listed |
| Microsoft windows nt | = 4.0-sp4 | No fix listed |
| Microsoft windows nt | = 4.0-sp5 | No fix listed |
| Microsoft windows nt | = 4.0-sp6 | No fix listed |
| Microsoft windows nt | = 4.0-sp6a | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20041214 HyperTerminal - Buffer Overflow In .ht File mailing-list
- MS04-043 vendor-advisory
- win-hyperterminal-session-bo(18336) vdb-entry
- oval:org.mitre.oval:def:1603 signature vdb-entry
- oval:org.mitre.oval:def:2545 signature vdb-entry
- oval:org.mitre.oval:def:3138 signature vdb-entry
- oval:org.mitre.oval:def:3973 signature vdb-entry
- oval:org.mitre.oval:def:4508 signature vdb-entry
- oval:org.mitre.oval:def:4741 signature vdb-entry