PT-2005-1166 · Microsoft · Exchange Server+2

Publicado 2005-02-08 · Atualizado 2019-04-30 · CVE-2005-0044

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Exchange Server versions 5.0 through 2003

Description The issue is related to the OLE component, which does not properly validate the lengths of messages for certain OLE data. This allows remote attackers to execute arbitrary code.

Recommendations For Windows versions prior to the fixed version, update to a version that includes the fix for the issue. For Exchange Server versions 5.0 through 2003, consider disabling the OLE component as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2005-0044

Produtos afetados

Exchange Server

Ole

Windows

Referências · 10

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3568 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1180 · Nota
• http://us-cert.gov/cas/techalerts/TA05-039A.html · Nota
• http://kb.cert.org/vuls/id/927889 · Correção
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19109 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0044 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-0044 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4499 · Nota