2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2005-1208" ,
"sourceIdentifier" : "secure@microsoft.com" ,
"published" : "2005-06-14T04:00:00.000" ,
2024-11-21 23:11:37 +00:00
"lastModified" : "2024-11-20T23:56:51.197" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a \"ms-its:\" URL in Internet Explorer."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C" ,
2024-11-21 23:11:37 +00:00
"baseScore" : 10.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "COMPLETE" ,
"integrityImpact" : "COMPLETE" ,
2024-11-21 23:11:37 +00:00
"availabilityImpact" : "COMPLETE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 10.0 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : true ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-Other"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D2CA1674-A8A0-479A-9D80-344D3C563A24"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "BE3DF901-734B-4956-9D22-FE4608A31DDA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:*" ,
"matchCriteriaId" : "207B8A6E-5158-4636-91D8-38021B91CB42"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*" ,
"matchCriteriaId" : "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:*" ,
"matchCriteriaId" : "EAB2E520-56D9-4B3F-99BA-EBC04AC30E4F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B127407D-AE50-4AFE-A780-D85B5AF44A2D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "986AE140-316D-4874-AEE2-3058A007D33F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:*" ,
"matchCriteriaId" : "61E9C554-757E-4912-A3F6-6F1DB17483AD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4E7FD818-322D-4089-A644-360C33943D29"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*" ,
"matchCriteriaId" : "5D42E51C-740A-4441-8BAF-D073111B984C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:*" ,
"matchCriteriaId" : "34ACB544-87DD-4D9A-99F0-A10F48C1EE05"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:*" ,
"matchCriteriaId" : "EEAFE154-7058-40A1-9806-22476A7DF0BA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*" ,
"matchCriteriaId" : "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:*" ,
"matchCriteriaId" : "394F16B8-C29F-445A-AA47-AA82F78CFA20"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A3AC387D-BB23-4EB9-A7DA-6E3F5CD8EFD7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B518E945-5FDE-4A37-878D-6946653C91F7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*" ,
"matchCriteriaId" : "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:*" ,
"matchCriteriaId" : "A2A2852D-64BE-40B1-8811-02EBDC1E044E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:*" ,
"matchCriteriaId" : "2D3B703C-79B2-4FA2-9E12-713AB977A880"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:*" ,
"matchCriteriaId" : "91D6D065-A28D-49DA-B7F4-38421FF86498"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:*" ,
"matchCriteriaId" : "B95B2BE4-B4E0-4B77-9999-53B9224F5CB1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*" ,
"matchCriteriaId" : "BC176BB0-1655-4BEA-A841-C4158167CC9B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*" ,
"matchCriteriaId" : "403945FA-8676-4D98-B903-48452B46F48F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*" ,
"matchCriteriaId" : "580B0C9B-DD85-40FA-9D37-BAC0C96D57FC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*" ,
"matchCriteriaId" : "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:*" ,
"matchCriteriaId" : "B3BBBB2E-1699-4E1E-81BB-7A394DD6B31D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:*" ,
"matchCriteriaId" : "ADEBB882-1C55-4B7B-B4CF-F1B23502FD90"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*" ,
"matchCriteriaId" : "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*" ,
"matchCriteriaId" : "6A05337E-18A5-4939-85A0-69583D9B5AD9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*" ,
"matchCriteriaId" : "B9687E6C-EDE9-42E4-93D0-C4144FEC917A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*" ,
"matchCriteriaId" : "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*" ,
"matchCriteriaId" : "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*" ,
"matchCriteriaId" : "FB2BE2DE-7B06-47ED-A674-15D45448F357"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.html" ,
"source" : "secure@microsoft.com" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://secunia.com/advisories/15683" ,
"source" : "secure@microsoft.com" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.kb.cert.org/vuls/id/851869" ,
"source" : "secure@microsoft.com" ,
"tags" : [
"Patch" ,
2024-11-21 23:11:37 +00:00
"Third Party Advisory" ,
"US Government Resource"
2023-04-24 12:24:31 +02:00
]
} ,
{
"url" : "http://www.securityfocus.com/bid/13953" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "http://www.us-cert.gov/cas/techalerts/TA05-165A.html" ,
"source" : "secure@microsoft.com" ,
"tags" : [
"Patch" ,
"Third Party Advisory" ,
"US Government Resource"
]
} ,
{
"url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-026" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381" ,
"source" : "secure@microsoft.com"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463" ,
"source" : "secure@microsoft.com"
2024-11-21 23:11:37 +00:00
} ,
{
"url" : "http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://secunia.com/advisories/15683" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://www.kb.cert.org/vuls/id/851869" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Third Party Advisory" ,
"US Government Resource"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/13953" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://www.us-cert.gov/cas/techalerts/TA05-165A.html" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Third Party Advisory" ,
"US Government Resource"
]
} ,
{
"url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-026" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
