PT-2005-1177 · Microsoft · Windows 2000+4

Anna Hollingzworth · Published 2005-02-08 · Updated 2019-04-30 · CVE-2005-0057

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hyperlink Object Library for Windows versions 98, 2000, XP, and Server 2003

Description The issue allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.

Recommendations For Windows 98, 2000, XP, and Server 2003, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2005-0057

Affected Products

Hyperlink Object Library

Windows 2000

Windows 98

Windows Server 2003

Windows Xp

References · 11

• http://us-cert.gov/cas/techalerts/TA05-039A.html · Patch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0057 · Security Note
• http://kb.cert.org/vuls/id/820427 · Patch
• http://securityfocus.com/bid/12479 · Note
• http://secunia.com/advisories/14195 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19110 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3203 · Note
• http://securitytracker.com/id?1013119 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A713 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2570 · Note