Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2005-1208
HistoryJun 14, 2005 - 4:00 a.m.

CVE-2005-1208

2005-06-1404:00:00
NVD-CWE-Other
[email protected]
web.nvd.nist.gov
27
cve-2005-1208
microsoft windows
integer overflow
remote attackers
arbitrary code execution
chm file
buffer overflow
internet explorer
nvd

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.454 Medium

EPSS

Percentile

97.4%

JSON

Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a “ms-its:” URL in Internet Explorer.

Related

securityvulns 1
cert 1
nessus 1
securityvulns
securityvulns
Microsoft Security Bulletin MS05-026 Vulnerability in HTML Help Could Allow Remote Code Execution (896358)
2005-06-15 00:00:00
cert
cert
Microsoft HTML Help vulnerable to integer overflow
2005-06-14 00:00:00
nessus
nessus
MS05-026: Vulnerability in HTML Help Could Allow Remote Code Execution (896358)
2005-06-14 00:00:00

8.1 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.454 Medium

EPSS

Percentile

97.4%

JSON
Related for CVE-2005-1208
securityvulns1cert1nessus1