Lucene search
K

Unchecked Buffer in Windows Help(Q323255)

🗓️ 03 Nov 2005 00:00:00Reported by This script is Copyright (C) 2002 SECNAP Network Security, LLCType 
openvas
 openvas
🔗 plugins.openvas.org👁 39 Views

Unchecked buffer in Windows help could allow attacker to gain system control. Install patch immediately

Related
Code
ReporterTitlePublishedViews
Family
CVE
CVE-2002-0693
5 Oct 200204:00
cve
CVE
CVE-2002-0694
1 Sep 200404:00
cve
Cvelist
CVE-2002-0693
5 Oct 200204:00
cvelist
Cvelist
CVE-2002-0694
1 Sep 200404:00
cvelist
NVD
CVE-2002-0693
10 Oct 200204:00
nvd
NVD
CVE-2002-0694
10 Oct 200204:00
nvd
OpenVAS
Unchecked Buffer in Windows Help (Q323255)
3 Nov 200500:00
openvas
Tenable Nessus
MS02-055: Unchecked Buffer in Windows Help Facility Could Enable Code Execution (323255)
24 Oct 200200:00
nessus
# OpenVAS Vulnerability Test
# $Id: smb_nt_ms02-055.nasl 8023 2017-12-07 08:36:26Z teissa $
# Description: Unchecked Buffer in Windows Help(Q323255)
#
# Authors:
# Michael Scheidell SECNAP Network Security
#
# Copyright:
# Copyright (C) 2002 SECNAP Network Security, LLC
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License version 2,
# as published by the Free Software Foundation
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
#

tag_summary = "An unchecked buffer in Windows help could allow an attacker to
could gain control over user's system.

Maximum Severity Rating: Critical 

Recommendation: Customers should install the patch immediately. 

Affected Software: 

Microsoft Windows 98 
Microsoft Windows 98 Second Edition 
Microsoft Windows Millennium Edition 
Microsoft Windows NT 4.0 
Microsoft Windows NT 4.0, Terminal Server Edition 
Microsoft Windows 2000 
Microsoft Windows XP 

See
http://www.microsoft.com/technet/security/bulletin/ms02-055.mspx";

if(description)
{
 script_id(11147);
 script_version("$Revision: 8023 $");
 script_tag(name:"last_modification", value:"$Date: 2017-12-07 09:36:26 +0100 (Thu, 07 Dec 2017) $");
 script_tag(name:"creation_date", value:"2005-11-03 14:08:04 +0100 (Thu, 03 Nov 2005)");
 script_bugtraq_id(4387, 5874);
 script_tag(name:"cvss_base", value:"7.5");
 script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:P/I:P/A:P");
 script_cve_id("CVE-2002-0693", "CVE-2002-0694"); 

 name = "Unchecked Buffer in Windows Help(Q323255)";
 
 script_name(name);
 


 
 script_category(ACT_GATHER_INFO);
  script_tag(name:"qod_type", value:"registry");
 
 script_copyright("This script is Copyright (C) 2002 SECNAP Network Security, LLC");
 family = "Windows : Microsoft Bulletins";
 script_family(family);
 
 script_dependencies("secpod_reg_enum.nasl");
 script_require_keys("SMB/Registry/Enumerated");
 script_mandatory_keys("SMB/WindowsVersion");
 script_require_ports(139, 445);
 script_tag(name : "summary" , value : tag_summary);
 exit(0);
}

include("secpod_reg.inc");

if ( hotfix_check_sp(nt:7, win2k:4, xp:1) <= 0 ) exit(0);
if ( hotfix_missing(name:"Q323255") > 0 ) 
	security_message(get_kb_item("SMB/transport"));

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation