CVE-2005-1208

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Integer overflow in Microsoft Windows 98, 2000, XP SP2 and earlier, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted compiled Help (.CHM) file with a large size field that triggers a heap-based buffer overflow, as demonstrated using a "ms-its:" URL in Internet Explorer.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.htmlPatch, Vendor Advisory
http://secunia.com/advisories/15683Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/851869Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/13953
http://www.us-cert.gov/cas/techalerts/TA05-165A.htmlPatch, Third Party Advisory, US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-026
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463
http://archives.neohapsis.com/archives/vulnwatch/2005-q2/0062.htmlPatch, Vendor Advisory
http://secunia.com/advisories/15683Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/851869Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/13953
http://www.us-cert.gov/cas/techalerts/TA05-165A.htmlPatch, Third Party Advisory, US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-026
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1057
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A381
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A463

Timeline

Published: Jun 14, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-12115.1Buffer overflow in the PNG image rendering component of Microsoft Internet Explorer allows remote attackers to execute arbitrary code via a CVE-2005-12127.5Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark CVE-2005-12137.5Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP s CVE-2005-12145.1Microsoft Agent allows remote attackers to spoof trusted Internet content and execute arbitrary code by disguising security prompts on a mal CVE-2005-12157.5Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP reques CVE-2005-12167.5Microsoft ISA Server 2000 allows remote attackers to connect to services utilizing the NetBIOS protocol via a NetBIOS connection with an ISA CVE-2005-12185.0The Microsoft Windows kernel in Microsoft Windows 2000 Server, Windows XP, and Windows Server 2003 allows remote attackers to cause a denial CVE-2005-12197.5Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with cra CVE-2005-12207.5Shoutbox SCRIPT 3.0.2 and earlier allows remote attackers to obtain sensitive information via a direct request to db/settings.dat, which dis CVE-2005-12217.5SQL injection vulnerability in login.asp for Ecommerce-Carts EcommPro 3.0 allows remote attackers to execute arbitrary SQL commands via the CVE-2005-12227.5cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference CVE-2005-12237.5Multiple SQL injection vulnerabilities in Ocean12 Calendar manager 1.01 allow remote attackers to execute arbitrary SQL commands via the Adm