CVE-2005-0059

Description

Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.

Affected products

• microsoft / windows_2000
• microsoft / windows_2000
• microsoft / windows_2000
• microsoft / windows_2000
• microsoft / windows_2000
• microsoft / windows_98
• microsoft / windows_98se
• microsoft / windows_xp
• microsoft / windows_xp
• microsoft / windows_xp
• microsoft / windows_xp
• microsoft / windows_xp
• microsoft / windows_xp
• microsoft / windows_xp
• microsoft / windows_xp
• microsoft / windows_xp
• microsoft / windows_xp

Exploits & proofs of concept

• exploit-dbMicrosoft Message Queueing Service - Path Overflow (MS05-017) (Metasploit)by Metasploit
• exploit-dbMicrosoft Windows Message Queuing - Remote Buffer Overflow Universal (MS05-017) (v.0.3)by houseofdabus

References

• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4988
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4384
• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-017