HTTP: Microsoft Windows Hyperlink Buffer Overflow

A buffer overflow exists in the Microsoft Windows system library used to handle hyperlink objects. An unchecked buffer in the Microsoft Object Library is vulnerable to attack when malformed hyperlinks are processed when a user clicks on a hyperlink in a browser or in HTML-rendered email. An attacker who successfully exploits this vulnerability can execute code with the privileges of the currently logged in user. In a simple attack case, the attacker can terminate the application that is using the ActiveX hyperlink library. In a sophisticated attack, he can inject arbitrary code into the target. The behaviour of the target is dependent on the nature of the malicious code. The exploit executes with the privileges of the currently logged in user. If this account has elevated privileges, an attacker may take control of the target system.

Extended Description

The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an "unchecked buffer" in the library, possibly due to a buffer overflow.

Affected Products

Microsoft windows_98

References

BugTraq: 12479

CVE: CVE-2005-0057

Short Name

HTTP:MS-WINDOWS-HYPERLINK-BO

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Windows Hyperlink Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?