NetSight
IP …
high7.2Public exploit code

CVE-2005-0047

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute ar…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows attackers to execute arbitrary code, aka the "COM Structured Storage Vulnerability."

Affected products

VendorProductAffected versions
MicrosoftWindows 2000
All versions
MicrosoftWindows 2003 Server
Versions enterprise, enterprise_64-bit, r2, standard, web
MicrosoftWindows Xp
All versions

References