OVAL Repository - View Definition: oval:org.mitre.oval:def:1749

Open Vulnerability and Assessment Language (OVAL)

Offical Language Release

Repository Downloads

News — November 5, 2009

OVAL Repository > View Definition

View Definition

NEW SEARCH : BACK

Definition Id: oval:org.mitre.oval:def:1749		Date: 2008-02-28
Title:	Windows NT Long Share Names Vulnerability
Description:	Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
Version:	5	Class:	vulnerability
Status:	ACCEPTED	Reference(s):	CVE-2004-0214
Family:	windows
Platform(s):	Microsoft Windows NT	Product(s):	Windows Shell
Definition Synopsis:
Microsoft Windows NT is installed AND a vulnerable version of shell32.dll exists a vulnerable version of shell32.dll exists on NT Server Windows NT server product option this is an NT Server (stand-alone) OR this is an NT Server (domain controller) AND a vulnerable version of shell32.dll exists Active Desktop is installed and shell32.dll is less than 4.72.3843.3100 Active Desktop is installed AND the version of shell32.dll is less than 4.72.3843.3100 OR Active Desktop is not installed and shell32.dll is less than 4.0.1381.7267 NOT Active Desktop is installed AND the version of shell32.dll is less than 4.0.1381.7267 OR a vulnerable version of shell32.dll exists on NT Terminal Server this is an NT Terminal Server AND the version of shell32.dll is less than 4.0.1381.3356 AND NOT the patch q841356 is installed (Hotfix key)

NEW SEARCH : BACK

OVAL Repository
About the Repository
OVAL Repository Forum
Latest Updates
Statistics
Search
Downloads
Submit Content
Other Items of Interest
OVAL Archive
Terms of Use


	OVAL is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security. The OVAL Web site is hosted by The MITRE Corporation. Copyright 2002-2009, The MITRE Corporation. All rights reserved. OVAL and the OVAL logo are registered trademarks of The MITRE Corporation. Contact oval@mitre.org for more information.	Privacy policy Terms of use