|
|
Info |
Last Modified |
| 10 months ago |
|
|
|
|
Description |
A remote overflow exists in Microsoft Windows via the "ms-its" protocol specification. Microsoft Windows fails to check the size field resulting in a heap overflow. Specifying a very high value will cause a buffer overflow. With a specially crafted request, an attacker can cause Internet Explorer to open a malicious .CHM file and cause an excessive memory copy that overwrites portions of memory resulting in a loss of availability and possibly remote code execution.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Exploit:
Exploit Rumored / Private
Disclosure:
OSVDB Verified
|
|
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch (MS05-026) to address this vulnerability.
|
|
Products |
|
Windows
 |
98 |
98 SE |
ME |
2000 |
XP |
2003 |
|
|
|
|
|
|
Credit |
- eEye Digital Security - info
 eeye.com - eEye Digital Security
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
