CVE-2005-0058

Description

Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.

Affected products

• Microsoft / windows_2000
• Microsoft / windows_2003_serverr2 – r2
• Microsoft / windows_98
• Microsoft / windows_98se
• Microsoft / windows_me
• Microsoft / windows_xp

Exploits & proofs of concept

• exploit-dbMicrosoft Windows - Telephony Service Command Execution (MS05-040)by Cesar Cerrudo

References

• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1297
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100088
• MISChttp://www.securityfocus.com/bid/14518
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1075
• MISChttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-040
• MISChttp://securitytracker.com/id?1014639
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100086
• VENDOR_ADVISORYhttp://secunia.com/advisories/16354/
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100084
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1213
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100085