CVE-2005-1978 COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.
HighCVSS 7.5
EPSS 53.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = 64-bit | No fix listed |
| Microsoft windows 2003 server | = itanium | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows 2003 server | = sp1 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 17161 third-party-advisory
- 17172 third-party-advisory
- 17223 third-party-advisory
- 17509 third-party-advisory
- support.avaya.com
- VU#950516 third-party-advisory us-government-resource
- 15057 vdb-entry
- TA05-284A third-party-advisory us-government-resource
- MS05-051 vendor-advisory
- oval:org.mitre.oval:def:1261 signature vdb-entry
- oval:org.mitre.oval:def:1269 signature vdb-entry
- oval:org.mitre.oval:def:1466 signature vdb-entry
- oval:org.mitre.oval:def:1499 signature vdb-entry
- oval:org.mitre.oval:def:576 signature vdb-entry
- oval:org.mitre.oval:def:816 signature vdb-entry