CVE-2004-0897 The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
HighCVSS 10.0
EPSS 42.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 13802 third-party-advisory
- 1012833 vdb-entry
- P-095 government-resource third-party-advisory vendor-advisory
- VU#657118 patch third-party-advisory us-government-resource
- 12228 vdb-entry
- MS05-003 vendor-advisory
- oval:org.mitre.oval:def:2128 signature vdb-entry
- oval:org.mitre.oval:def:2447 signature vdb-entry