CVE-2005-1208

Microsoft Windows - Remote Code Execution via Crafted CHM File

Title source: llm
STIX 2.1

Description

Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/13953
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/15683
Patch, Vendor Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463
Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/851869
Patch, Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA05-165A.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057

Scores

EPSS 0.4733
EPSS Percentile 98.7%

Details

Status published
Products (11)
microsoft/windows_2000
microsoft/windows_2003_server 64-bit
microsoft/windows_2003_server datacenter_64-bit sp1 (2 CPE variants)
microsoft/windows_2003_server enterprise (3 CPE variants)
microsoft/windows_2003_server enterprise_64-bit (3 CPE variants)
microsoft/windows_2003_server r2 (5 CPE variants)
microsoft/windows_2003_server standard (3 CPE variants)
microsoft/windows_2003_server standard_64-bit
microsoft/windows_2003_server web (3 CPE variants)
microsoft/windows_98
... and 1 more
Published Jun 14, 2005
Tracked Since Feb 18, 2026