CVE-2005-0047

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."

CVSS Metrics

Affected Products (21)

GitHub Security Advisory GHSA-4q9j-c8xc-j26g

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM...

References (20)

• http://marc.info/?l=bugtraq&m=111755870828817&w=2
• http://www.argeniss.com/research/SSExploit.c
• http://www.kb.cert.org/vuls/id/597889 Patch, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA05-039A.html Patch, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19105
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2351
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2892
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A901
• http://marc.info/?l=bugtraq&m=111755870828817&w=2
• http://www.argeniss.com/research/SSExploit.c
• http://www.kb.cert.org/vuls/id/597889 Patch, US Government Resource
• http://www.us-cert.gov/cas/techalerts/TA05-039A.html Patch, US Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012