Description
The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
References
- 13802 third-party-advisory
- P-095 third-party-advisory government-resource
- 12228 vdb-entry
- VU#657118 third-party-advisory
- MS05-003 vendor-advisory
- oval:org.mitre.oval:def:2447 vdb-entry signature
- 1012833 vdb-entry
- oval:org.mitre.oval:def:2128 vdb-entry signature