Oval Definition:oval:org.mitre.oval:def:2128
Revision Date:2005-05-04Version:42
Title:Windows 2003/64-bit XP Indexing Service Code Execution Vulnerability
Description:The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-0897
Platform(s):Microsoft Windows Server 2003
Product(s):Microsoft Indexing Service
Definition Synopsis
  • Windows Server 2003 or Windows XP 64-Bit Edition Version 2003
  • Windows Server 2003 is installed
  • OR Windows XP 64-bit
  • Windows XP is installed
  • AND a version of Windows for the ia64 architecture is installed
  • AND Indexing Service ciodm.dll is less than 5.2.3790.220
  • AND NOT the patch Windows 2003 KB871250 is installed
    • BACK