CVE-2004-0848

Опубликовано: 08 фев. 2005

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

Ссылки

http://www.kb.cert.org/vuls/id/416001
Patch
Third Party Advisory
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-005
https://exchange.xforce.ibmcloud.com/vulnerabilities/19107
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2348
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2738
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4022
http://www.kb.cert.org/vuls/id/416001
Patch
Third Party Advisory
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA05-039A.html
Patch
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-005
https://exchange.xforce.ibmcloud.com/vulnerabilities/19107
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2348
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2738
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4022

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:xp:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:xp:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:powerpoint:2002:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:powerpoint:2002:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:powerpoint:2002:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:project:2002:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:project:2002:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:visio:2002:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:visio:2002:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:visio:2002:sp2:professional:*:*:*:*:*

cpe:2.3:a:microsoft:visio:2002:sp2:standard:*:*:*:*:*

cpe:2.3:a:microsoft:word:2002:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2002:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2002:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:word:2002:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:works:2002:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:works:2003:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:works:2004:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.42122

Средний

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7xq5-jxmg-7hjc

github

почти 4 года назад