CVE-2006-2297 Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow whil...
MediumCVSS 4.0
EPSS 19.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in Microsoft Infotech Storage System Library (itss.dll) allows user-assisted attackers to execute arbitrary code via a crafted CHM / ITS file that triggers the overflow while decompiling.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft infotech storage system library | All versions | No fix listed |
References
- 20061 third-party-advisory vendor-advisory
- 886 third-party-advisory
- 25501 vdb-entry
- www.reversemode.com
- 20060509 [Reversemode] Microsoft Infotech Storage library Heap Corruption mailing-list
- 20060510 Re: [Reversemode] Microsoft Infotech Storage library Heap Corruption mailing-list
- 20060512 Re: [Reversemode] Microsoft Infotech Storage library Heap Corruption mailing-list
- 17926 exploit vdb-entry
- ADV-2006-1761 vdb-entry vendor-advisory
- ms-itssdll-chm-bo(26340) vdb-entry