The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.
Version | Base score | Base severity | Vector |
---|
Hyperlink | Resource Type |
---|
The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.
Type | CWE ID | Description |
---|---|---|
text | N/A | n/a |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
Hyperlink | Resource |
---|---|
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-015 | vendor-advisory x_refsource_MS |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A713 | vdb-entry signature x_refsource_OVAL |
http://www.us-cert.gov/cas/techalerts/TA05-039A.html | third-party-advisory x_refsource_CERT |
http://www.securityfocus.com/bid/12479 | vdb-entry x_refsource_BID |
https://exchange.xforce.ibmcloud.com/vulnerabilities/19110 | vdb-entry x_refsource_XF |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3203 | vdb-entry signature x_refsource_OVAL |
http://securitytracker.com/id?1013119 | vdb-entry x_refsource_SECTRACK |
http://secunia.com/advisories/14195 | third-party-advisory x_refsource_SECUNIA |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2570 | vdb-entry signature x_refsource_OVAL |
http://www.kb.cert.org/vuls/id/820427 | third-party-advisory x_refsource_CERT-VN |
Version | Base score | Base severity | Vector |
---|
CAPEC ID | Description |
---|
Event | Date |
---|
The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.
Date Added | Due Date | Vulnerability Name | Required Action |
---|---|---|---|
N/A |
Type | Version | Base score | Base severity | Vector |
---|---|---|---|---|
Primary | 2.0 | 7.5 | HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CWE ID | Type | Source |
---|---|---|
NVD-CWE-Other | Primary | nvd@nist.gov |