CVE-2005-1208
high · 10Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
10
CVSS
47.3%
EPSS (exploit prob.)
99th
EPSS percentile
2005-06-14
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_2000 | all versions |
| microsoft | windows_2003_server | 64-bit |
| microsoft | windows_2003_server | datacenter_64-bit |
| microsoft | windows_2003_server | datacenter_64-bit |
| microsoft | windows_2003_server | enterprise |
| microsoft | windows_2003_server | enterprise |
| microsoft | windows_2003_server | enterprise |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | enterprise_64-bit |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard |
| microsoft | windows_2003_server | standard_64-bit |
| microsoft | windows_2003_server | web |
| microsoft | windows_2003_server | web |
| microsoft | windows_2003_server | web |
| microsoft | windows_98 | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.html
- http://secunia.com/advisories/15683
- http://www.kb.cert.org/vuls/id/851869
- http://www.securityfocus.com/bid/13953
- http://www.us-cert.gov/cas/techalerts/TA05-165A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-026
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463
- http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.html
- http://secunia.com/advisories/15683
- http://www.kb.cert.org/vuls/id/851869
- http://www.securityfocus.com/bid/13953
- http://www.us-cert.gov/cas/techalerts/TA05-165A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-026
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-1208