QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2005-1208

Back to search

CVE-2005-1208

Published: Jun 15, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.

VendorProductVersions

n/a

n/a

affected
n/a

References

13953
vdb-entry
x_refsource_BID
oval:org.mitre.oval:def:381
vdb-entry
signature
x_refsource_OVAL
15683
third-party-advisory
x_refsource_SECUNIA
MS05-026
vendor-advisory
x_refsource_MS
oval:org.mitre.oval:def:463
vdb-entry
signature
x_refsource_OVAL
VU#851869
third-party-advisory
x_refsource_CERT-VN
TA05-165A
third-party-advisory
x_refsource_CERT
oval:org.mitre.oval:def:1057
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now