CVE-2005-1978

Microsoft Windows - RCE

Title source: llm

Description

COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.

Exploits (1)

exploitdb WORKING POC

cppremotewindows

https://www.exploit-db.com/exploits/1352

View Code ZIP pw:eip

References (15)

[Vendor Advisory] http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

[US Government Resource] http://www.kb.cert.org/vuls/id/950516

[US Government Resource] http://www.us-cert.gov/cas/techalerts/TA05-284A.html

[Vendor Advisory] https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-051

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1261

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1269

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/15057

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1466

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1499

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A576

[Third Party Advisory, VDB Entry] https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A816

[Third Party Advisory] http://secunia.com/advisories/17161

[Third Party Advisory] http://secunia.com/advisories/17172

[Third Party Advisory] http://secunia.com/advisories/17223

[Third Party Advisory] http://secunia.com/advisories/17509

Scores

EPSS 0.4804

EPSS Percentile 97.7%

Details

Status published

Products (6)

microsoft/windows_2000

microsoft/windows_2003_server 64-bit

microsoft/windows_2003_server itanium

microsoft/windows_2003_server r2

microsoft/windows_2003_server sp1 (2 CPE variants)

microsoft/windows_xp (3 CPE variants)

Published Oct 12, 2005

Tracked Since Feb 18, 2026