oval:org.mitre.oval:def:463

Definition Id: oval:org.mitre.oval:def:463

Oval ID:	oval:org.mitre.oval:def:463
Title:	Windows 2000 HTML Help Remote Code Execution Vulnerability
Description:	Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2005-1208	Version:	7
Platform(s):	Microsoft Windows 2000	Product(s):	HTML Help Facility
Definition Synopsis:
Windows 2000 (sp4 or earlier) is installed Windows 2000 is installed AND NOT Win2K/XP/2003 service pack 5 (or later) is installed AND the version of hh.exe is less than 5.2.3790.309 AND NOT the patch kb896358 is installed (Hotfix key)