Oval Definition:oval:org.mitre.oval:def:330
Revision Date:2011-05-16Version:46
Title:Windows XP,SP2 Color Management Module Buffer Overflow
Description:Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2005-1219
Platform(s):Microsoft Windows XP
Product(s):Microsoft Color Management Module
Definition Synopsis
  • Windows XP 32 bit Service Pack 2
  • Win2K/XP/2003/Vista/2008 service pack 2 is installed
  • AND Windows XP 32-bit edition is installed
  • Windows XP is installed
  • AND 32-Bit version of Windows is installed
  • AND the version of mscms.dll is less than 5.1.2600.2709
  • AND NOT the patch KB901214 is installed
    • BACK