Description
Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a long Syllabus string in crafted bookmark link files (cbo, cbl, or .cbm), a different issue than CVE-2005-1212.
References
- ADV-2007-0574 vdb-entry
- MS07-005 vendor-advisory
- 24121 third-party-advisory
- ms-stepbystep-bookmark-bo(30596) vdb-entry
- VU#466873 third-party-advisory
- oval:org.mitre.oval:def:162 vdb-entry signature
- 20070213 MS Interactive Training .cbo Overflow mailing-list
- TA07-044A third-party-advisory
- 22484 vdb-entry
- 1017632 vdb-entry
- 31883 vdb-entry