Description
HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.
References
- win-hyperterminal-session-bo(18336) vdb-entry
- oval:org.mitre.oval:def:4741 vdb-entry signature
- oval:org.mitre.oval:def:3973 vdb-entry signature
- MS04-043 vendor-advisory
- oval:org.mitre.oval:def:3138 vdb-entry signature
- oval:org.mitre.oval:def:2545 vdb-entry signature
- 20041214 HyperTerminal - Buffer Overflow In .ht File mailing-list
- oval:org.mitre.oval:def:4508 vdb-entry signature
- oval:org.mitre.oval:def:1603 vdb-entry signature