Lucene search

[email protected]CVE-2005-1212

HistoryJun 14, 2005 - 4:00 a.m.

CVE-2005-1212

2005-06-1404:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1212

buffer overflow

microsoft

step-by-step interactive training

orun32.exe

remote code execution

bookmark link file

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.105 Low

EPSS

Percentile

95.0%

JSON

Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.

Affected configurations

NVD

Node

microsoftwindows_2000

microsoftwindows_2000sp1

microsoftwindows_2000sp2

microsoftwindows_2000sp3

microsoftwindows_2000sp4

microsoftwindows_2000sp4fr

microsoftwindows_2000_terminal_services

microsoftwindows_2000_terminal_servicessp1

microsoftwindows_2000_terminal_servicessp2

microsoftwindows_2000_terminal_servicessp3

microsoftwindows_2003_serverMatch64-bit

microsoftwindows_2003_serverMatchdatacenter_64-bitsp1

microsoftwindows_2003_serverMatchdatacenter_64-bitsp1_beta_1

microsoftwindows_2003_serverMatchenterprise64-bit

microsoftwindows_2003_serverMatchenterprisesp1

microsoftwindows_2003_serverMatchenterprisesp1_beta_1

microsoftwindows_2003_serverMatchenterprise_64-bit

microsoftwindows_2003_serverMatchenterprise_64-bitsp1

microsoftwindows_2003_serverMatchenterprise_64-bitsp1_beta_1

microsoftwindows_2003_serverMatchr2

microsoftwindows_2003_serverMatchr264-bit

microsoftwindows_2003_serverMatchr2datacenter_64-bit

microsoftwindows_2003_serverMatchr2sp1

microsoftwindows_2003_serverMatchr2sp1_beta_1

microsoftwindows_2003_serverMatchstandard64-bit

microsoftwindows_2003_serverMatchstandardsp1

microsoftwindows_2003_serverMatchstandardsp1_beta_1

microsoftwindows_2003_serverMatchstandard_64-bit

microsoftwindows_2003_serverMatchweb

microsoftwindows_2003_serverMatchwebsp1

microsoftwindows_2003_serverMatchwebsp1_beta_1

microsoftwindows_98gold

microsoftwindows_98se

microsoftwindows_me

microsoftwindows_mesecond_edition

microsoftwindows_xp64-bit

microsoftwindows_xpembedded

microsoftwindows_xphome

microsoftwindows_xpmedia_center

microsoftwindows_xpgold

microsoftwindows_xpgoldprofessional

microsoftwindows_xpsp164-bit

microsoftwindows_xpsp1embedded

microsoftwindows_xpsp1home

microsoftwindows_xpsp1media_center

microsoftwindows_xpsp1tablet_pc

microsoftwindows_xpsp2home

microsoftwindows_xpsp2media_center

microsoftwindows_xpsp2tablet_pc

CPENameOperatorVersion
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_2000_terminal_servicesmicrosoft windows 2000 terminal serviceseq*
microsoft:windows_2003_servermicrosoft windows 2003 servereq64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqr2
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb

CPE	Name	Operator	Version
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_2000_terminal_services	microsoft windows 2000 terminal services	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	r2
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web

Rows per page:

1-10 of 141

References

idefense.com/application/poi/display?id=262&type=vulnerabilities&flashstatus=true

secunia.com/advisories/15669/

securitytracker.com/id?1014194

www.securityfocus.com/bid/13944

docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-031

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1224

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.8 High

AI Score

Confidence

High

0.105 Low

EPSS

Percentile

95.0%

JSON

Related for CVE-2005-1212

cvelist2 nessus1 nvd2 securityvulns2 cve1