Lucene search

[email protected]CVE-2005-0057

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0057

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

windows

hyperlink object library

remote code execution

buffer overflow

cve-2005-0057

nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.781 High

EPSS

Percentile

98.3%

JSON

The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an “unchecked buffer” in the library, possibly due to a buffer overflow.

Affected configurations

NVD

Node

microsoftwindows_2000

microsoftwindows_2000sp1

microsoftwindows_2000sp2

microsoftwindows_2000sp3

microsoftwindows_2000sp4

microsoftwindows_2003_serverMatchenterprise64-bit

microsoftwindows_2003_serverMatchenterprise_64-bit

microsoftwindows_2003_serverMatchr264-bit

microsoftwindows_2003_serverMatchr2datacenter_64-bit

microsoftwindows_2003_serverMatchstandard64-bit

microsoftwindows_2003_serverMatchweb

microsoftwindows_98gold

microsoftwindows_98se

microsoftwindows_me

microsoftwindows_xp64-bit

microsoftwindows_xphome

microsoftwindows_xpmedia_center

microsoftwindows_xpgoldprofessional

microsoftwindows_xpsp164-bit

microsoftwindows_xpsp1home

microsoftwindows_xpsp1media_center

microsoftwindows_xpsp2home

microsoftwindows_xpsp2media_center

microsoftwindows_xpsp2tablet_pc

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_98microsoft windows 98eq*
microsoft:windows_98semicrosoft windows 98seeq*
microsoft:windows_memicrosoft windows meeq*
microsoft:windows_xpmicrosoft windows xpeq*

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_98	microsoft windows 98	eq	*
microsoft:windows_98se	microsoft windows 98se	eq	*
microsoft:windows_me	microsoft windows me	eq	*
microsoft:windows_xp	microsoft windows xp	eq	*

References

secunia.com/advisories/14195

securitytracker.com/id?1013119

www.kb.cert.org/vuls/id/820427

www.securityfocus.com/bid/12479

www.us-cert.gov/cas/techalerts/TA05-039A.html

docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-015

exchange.xforce.ibmcloud.com/vulnerabilities/19110

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2570

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3203

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A713

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

High

0.781 High

EPSS

Percentile

98.3%

JSON

Related for CVE-2005-0057

cert1 securityvulns1 nvd1 nessus1 cvelist1