oval:org.mitre.oval:def:1057

Definition Id: oval:org.mitre.oval:def:1057

Oval ID:	oval:org.mitre.oval:def:1057
Title:	Windows XP HTML Help Remote Code Execution Vulnerability
Description:	Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1208	Version:	8
Platform(s):	Microsoft Windows XP	Product(s):	HTML Help Facility
Definition Synopsis:
Windows XP is installed AND a vulnerable version of hh.exe exists for specific Windows configurations a vulnerable version of hh.exe exists 32-bit version of Windows or 64-bit (itanium architecture) version of Windows is installed 32-Bit version of Windows is installed AND a version of Windows for the ia64 architecture is installed AND NOT Win2K/XP/2003 service pack 2 (or later) is installed AND the version of hh.exe is less than 5.2.3790.315 OR for 32-bit Windows with sp2 a vulnerable version of hh.exe exists 32-Bit version of Windows is installed AND Win2K/XP/2003/Vista/2008 Service Pack 2 is installed AND the version of hh.exe is less than 5.2.3790.2453 OR for 64-bit (x64 arch) Windows (gold edition) a vulnerable version of hh.exe exists 64-Bit (x64 architecture) version of Windows is installed AND NOT Win2K/XP/2003 is patched AND the version of hh.exe is less than 5.2.3790.2435 AND NOT the patch kb896358 is installed (Hotfix key)

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0266s

Facebook rss twitter linkedin mail