← Back

CVE-2005-0044

nvd nist
Published: May 2, 2005Modified: Apr 16, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."

Affected (25)

7 products
Exchange Server
Windows 2000
Windows 2003 Server
Windows 98
Windows 98se
Windows Me
Windows Xp
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 5.0
Configuration B
24 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
All versions
All versions
All versions
All versions
All versions
Microsoft
Version enterprise
Version enterprise_64-bit
Version r2
Version r2
Version standard
Version web
All versions
All versions
All versions
Microsoft
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions
All versions

References (16)

Source: cve@mitre.org
PatchUS Government Resource
Source: cve@mitre.org
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
PatchUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.