oval:org.mitre.oval:def:3514

Definition Id: oval:org.mitre.oval:def:3514

Oval ID:	oval:org.mitre.oval:def:3514
Title:	IE .chm Directory Traversal Windows Server 2003 Vulnerability
Description:	Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing ".." (dot dot) sequences and a filename that ends in "::" which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug may overlap CVE-2004-0475.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2003-1041	Version:	2
Platform(s):	Microsoft Windows Server 2003	Product(s):	HTML Help Facility
Definition Synopsis:
Software section Windows Server 2003 is installed AND the version of itss.dll is less than 5.2.3790.185 AND NOT the patch kb840315 is installed AND Configuration section NOT HTML Help is registered