Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.2
CVSSv2

CVE-2005-0047

Published: 02/05/2005 Updated: 30/04/2019
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 725
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Windows Xp

Vulnerability Summary

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows malicious users to execute arbitrary code, aka the "COM Structured Storage Vulnerability."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows xp

microsoft windows 2003 server r2

microsoft windows 2000

microsoft windows 2003 server enterprise

microsoft windows 2003 server enterprise_64-bit

microsoft windows 2003 server standard

microsoft windows 2003 server web

Exploits

Exploit DB: Microsoft Windows - COM Structured Storage Local (MS05-012)
// by Cesar Cerrudo - Argeniss - wwwargenisscom // MS05-012 - COM Structured Storage Vulnerability - CAN-2005-0047 Exploit // // More exploits at wwwargenisscom/productshtml // // Works on Win2k sp4, WinXP sp2, Win2k3 sp0 // Close all runing programs to avoid possible problems // If it finds the section and it doesn't work remove section permi ...

References

NVD-CWE-Otherhttp://www.us-cert.gov/cas/techalerts/TA05-039A.htmlhttp://www.kb.cert.org/vuls/id/597889http://www.argeniss.com/research/SSExploit.chttp://marc.info/?l=bugtraq&m=111755870828817&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/19105https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A901https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2892https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2351https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1159https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012https://nvd.nist.govhttps://www.exploit-db.com/exploits/1019/https://www.kb.cert.org/vuls/id/597889
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook