Unscored CVE-2005-0044 EUVD-2005-0045GHSA-m4w4-9m3w-pg34

The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of…

Published Feb 8, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."

References

oval:org.mitre.oval:def:2917 vdb-entry signature
win-ole-code-execution(19109) vdb-entry
oval:org.mitre.oval:def:1180 vdb-entry signature
VU#927889 third-party-advisory
TA05-039A third-party-advisory
oval:org.mitre.oval:def:3568 vdb-entry signature
MS05-012 vendor-advisory
oval:org.mitre.oval:def:4499 vdb-entry signature