CVE-2005-0047

Windows <2000-Server 2003 - RCE

Title source: llm

Description

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED

by Cesar Cerrudo · clocalwindows

https://www.exploit-db.com/exploits/1019

View Code ZIP pw:eip

References (10)

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A901

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159

[Patch, US Government Resource] http://www.us-cert.gov/cas/techalerts/TA05-039A.html

[Various Sources] http://www.argeniss.com/research/SSExploit.c

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012

[Mailing List] http://marc.info/?l=bugtraq&m=111755870828817&w=2

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2351

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/19105

[Patch, US Government Resource] http://www.kb.cert.org/vuls/id/597889

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2892

Scores

EPSS 0.0895

EPSS Percentile 92.6%

Details

Status published

Products (7)

microsoft/windows_2000 (5 CPE variants)

microsoft/windows_2003_server enterprise

microsoft/windows_2003_server enterprise_64-bit

microsoft/windows_2003_server r2 (2 CPE variants)

microsoft/windows_2003_server standard

microsoft/windows_2003_server web

microsoft/windows_xp (10 CPE variants)

Published May 02, 2005

Tracked Since Feb 18, 2026