Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-0044
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0044

2005-05-0204:00:00
[email protected]
web.nvd.nist.gov
41
input validation
vulnerability
windows
ole
remote code execution
cve-2005-0044
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.495 Medium

EPSS

Percentile

97.5%

JSON

The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the “Input Validation Vulnerability.”

Affected configurations

NVD
Node
microsoftexchange_serverMatch5.0
Node
microsoftwindows_2000
OR
microsoftwindows_2000sp1
OR
microsoftwindows_2000sp2
OR
microsoftwindows_2000sp3
OR
microsoftwindows_2000sp4
OR
microsoftwindows_2003_serverMatchenterprise64-bit
OR
microsoftwindows_2003_serverMatchenterprise_64-bit
OR
microsoftwindows_2003_serverMatchr264-bit
OR
microsoftwindows_2003_serverMatchr2datacenter_64-bit
OR
microsoftwindows_2003_serverMatchstandard64-bit
OR
microsoftwindows_2003_serverMatchweb
OR
microsoftwindows_98gold
OR
microsoftwindows_98se
OR
microsoftwindows_me
OR
microsoftwindows_xp64-bit
OR
microsoftwindows_xphome
OR
microsoftwindows_xpmedia_center
OR
microsoftwindows_xpgoldprofessional
OR
microsoftwindows_xpsp164-bit
OR
microsoftwindows_xpsp1home
OR
microsoftwindows_xpsp1media_center
OR
microsoftwindows_xpsp2home
OR
microsoftwindows_xpsp2media_center
OR
microsoftwindows_xpsp2tablet_pc

Related

cert 1
nvd 1
cvelist 1
securityvulns 1
nessus 1
cert
cert
Microsoft OLE buffer overflow
2005-02-08 00:00:00
nvd
nvd
CVE-2005-0044
2005-05-02 04:00:00
cvelist
cvelist
CVE-2005-0044
2005-02-08 05:00:00
securityvulns
securityvulns
Microsoft Security Bulletin MS05-012
2005-02-09 00:00:00
nessus
nessus
MS05-012: Vulnerability in OLE and COM Could Allow Code Execution (873333)
2005-02-08 00:00:00

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.495 Medium

EPSS

Percentile

97.5%

JSON
Related for CVE-2005-0044
cert1nvd1cvelist1securityvulns1nessus1