oval:org.mitre.oval:def:322

Definition Id: oval:org.mitre.oval:def:322

Oval ID:	oval:org.mitre.oval:def:322
Title:	IE v5.5,SP2 Bitmap Integer Overflow Vulnerability
Description:	Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2004-0566	Version:	3
Platform(s):	Microsoft Windows ME Microsoft Windows NT Microsoft Windows 2000	Product(s):	Microsoft Internet Explorer
Definition Synopsis:
Internet Explorer 5.5 Service Pack 2 is installed AND the version of mshtml.dll is less than 5.50.4943.400 AND NOT the patch kb832894 is installed (Installed Components key)