CVE-2005-1212

Published: Jun 14, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.

Affected (49)

Products: Microsoft: Windows 2000, Windows 2000 Terminal Services, Windows 2003 Server, Windows 98, Windows 98se, Windows Me, Windows Xp

Microsoft

7 products

Windows 2000

Windows 2000 Terminal Services

Configuration A

49 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2000 Terminal Services	All versions
Microsoft Windows 2003 Server	Version 64-bit
Microsoft Windows 2003 Server	Version datacenter_64-bit sp1
Microsoft Windows 2003 Server	Version datacenter_64-bit sp1_beta_1
Microsoft Windows 2003 Server	Version enterprise
Microsoft Windows 2003 Server	Version enterprise sp1
Microsoft Windows 2003 Server	Version enterprise sp1_beta_1
Microsoft Windows 2003 Server	Version enterprise_64-bit
Microsoft Windows 2003 Server	Version enterprise_64-bit sp1
Microsoft Windows 2003 Server	Version enterprise_64-bit sp1_beta_1
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version r2
Microsoft Windows 2003 Server	Version r2 sp1
Microsoft Windows 2003 Server	Version r2 sp1_beta_1
Microsoft Windows 2003 Server	Version standard
Microsoft Windows 2003 Server	Version standard sp1
Microsoft Windows 2003 Server	Version standard sp1_beta_1
Microsoft Windows 2003 Server	Version standard_64-bit
Microsoft Windows 2003 Server	Version web
Microsoft Windows 2003 Server	Version web sp1
Microsoft Windows 2003 Server	Version web sp1_beta_1
Microsoft Windows 98	All versions
Microsoft Windows 98se	All versions
Microsoft Windows Me	All versions
Microsoft Windows Me	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions