CVE-2005-0047 Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Sto...
HighCVSS 7.2
EPSS 4.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20050530 [Argeniss] MS05-012 Exploit mailing-list
- www.argeniss.com
- VU#597889 patch third-party-advisory us-government-resource
- TA05-039A patch third-party-advisory us-government-resource
- MS05-012 vendor-advisory
- win-com-gain-privileges(19105) vdb-entry
- oval:org.mitre.oval:def:1159 signature vdb-entry
- oval:org.mitre.oval:def:2351 signature vdb-entry
- oval:org.mitre.oval:def:2892 signature vdb-entry
- oval:org.mitre.oval:def:901 signature vdb-entry