CVE-2005-1208 Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a lar...
HighCVSS 10.0
EPSS 47.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = 64-bit | No fix listed |
| Microsoft windows 2003 server | = datacenter_64-bit-sp1 | No fix listed |
| Microsoft windows 2003 server | = datacenter_64-bit-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = enterprise | No fix listed |
| Microsoft windows 2003 server | = enterprise-sp1 | No fix listed |
| Microsoft windows 2003 server | = enterprise-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit-sp1 | No fix listed |
| Microsoft windows 2003 server | = enterprise_64-bit-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = r2-sp1 | No fix listed |
| Microsoft windows 2003 server | = r2-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = standard | No fix listed |
| Microsoft windows 2003 server | = standard-sp1 | No fix listed |
| Microsoft windows 2003 server | = standard-sp1_beta_1 | No fix listed |
| Microsoft windows 2003 server | = standard_64-bit | No fix listed |
| Microsoft windows 2003 server | = web | No fix listed |
| Microsoft windows 2003 server | = web-sp1 | No fix listed |
| Microsoft windows 2003 server | = web-sp1_beta_1 | No fix listed |
| Microsoft windows 98 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20050614 eEye Advisory - EEYEB-20050316 - HTML Help File Parsing Buffer Overflow mailing-list patch vendor-advisory
- 15683 patch third-party-advisory vendor-advisory
- VU#851869 patch third-party-advisory us-government-resource
- 13953 vdb-entry
- TA05-165A patch third-party-advisory us-government-resource
- MS05-026 vendor-advisory
- oval:org.mitre.oval:def:1057 signature vdb-entry
- oval:org.mitre.oval:def:381 signature vdb-entry
- oval:org.mitre.oval:def:463 signature vdb-entry