Lucene search

[email protected]CVE-2005-1212

HistoryJun 14, 2005 - 4:00 a.m.

CVE-2005-1212

2005-06-1404:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-1212

buffer overflow

microsoft

step-by-step interactive training

orun32.exe

remote code execution

bookmark link file

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.141 Low

EPSS

Percentile

95.6%

JSON

Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.

CPENameOperatorVersion
microsoft:windows_2003_servermicrosoft windows 2003 servereq64-bit
microsoft:windows_2000_terminal_servicesmicrosoft windows 2000 terminal serviceseq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqweb
microsoft:windows_xpmicrosoft windows xpeq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise
microsoft:windows_2003_servermicrosoft windows 2003 servereqenterprise_64-bit
microsoft:windows_2000microsoft windows 2000eq*
microsoft:windows_memicrosoft windows meeq*
microsoft:windows_2003_servermicrosoft windows 2003 servereqstandard_64-bit
microsoft:windows_2003_servermicrosoft windows 2003 servereqdatacenter_64-bit

CPE	Name	Operator	Version
microsoft:windows_2003_server	microsoft windows 2003 server	eq	64-bit
microsoft:windows_2000_terminal_services	microsoft windows 2000 terminal services	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	web
microsoft:windows_xp	microsoft windows xp	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise
microsoft:windows_2003_server	microsoft windows 2003 server	eq	enterprise_64-bit
microsoft:windows_2000	microsoft windows 2000	eq	*
microsoft:windows_me	microsoft windows me	eq	*
microsoft:windows_2003_server	microsoft windows 2003 server	eq	standard_64-bit
microsoft:windows_2003_server	microsoft windows 2003 server	eq	datacenter_64-bit

Rows per page:

1-10 of 141

References

idefense.com/application/poi/display?id=262&type=vulnerabilities&flashstatus=true

secunia.com/advisories/15669/

securitytracker.com/id?1014194

www.securityfocus.com/bid/13944

docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-031

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1224

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.141 Low

EPSS

Percentile

95.6%

JSON

Related for CVE-2005-1212

securityvulns2 nessus1 cve1