18606 : Microsoft Windows Telephony Application Programming Interface (TAPI) Overflow
Printer | http://osvdb.org/18606 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
3	386	over 6 years ago	about 1 year ago	5 times	90%

Timeline

Disclosure Date
2005-08-09

Description

Windows contains a flaw related to the Telephone Application Programming Interface (TAPI) that may allow an attacker to execute arbitrary code. No further details have been provided.

Classification

Location: Local Access Required, Remote / Network Access
Attack Type: Input Manipulation, Attack Type Unknown
Impact: Loss of Integrity
Solution: Patch / RCS
Exploit: Exploit Commercial
Disclosure: OSVDB Verified

Technical

According to Microsoft, this is a remotely exploitable flaw only on Windows 2000 Server. Windows Server 2003 requires remote authentication, and Windows 2000 Professional and XP Professional require a local login.

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability.

Products

Microsoft Corporation	Windows	2000 SP4
		XP SP1
		XP SP2
		XP Professional x64 Edition
		98
		98 SE
		ME
	Windows Server	2003
		2003 SP1
		2003 for Itanium
		2003 for Itanium SP1
		2003 x64 Edition

References

Security Tracker: 1014639
Bugtraq ID: 14518
Secunia Advisory ID: 16354
SCIP VulDB ID: 1687
CVE ID: 2005-0058 (see also: NVD)
ISS X-Force ID: 21599
Microsoft Knowledge Base Article: 893756
Mail List Post: http://archives.neohapsis.com/archives/dailydave/2005-q3/0221.html
Generic Exploit URL: http://immunitysec.com
http://www.saintcorporation.com/cgi-bin/exploit_info/windows_tapi
Other Advisory URL: http://www.securiteam.com/windowsntfocus/5ZP0F00GKA.html
Microsoft Security Bulletin: MS05-040
CIAC Advisory: p-268

Tools & Filters

Snort

10000 10001 10002 10003 10004 10005 10006 10007 10008 10009 9914 9915 9916 9917 9918 9919 9920 9921 9922 9923 9924 9925 9926 9927 9928 9929 9930 9931 9932 9933 9934 9935 9936 9937 9938 9939 9940 9941 9942 9943 9944 9945 9946 9947 9948 9949 9950 9951 9952 9953 9954 9955 9956 9957 9958 9959 9960 9961 9962 9963 9964 9965 9966 9967 9968 9969 9970 9971 9972 9973 9974 9975 9976 9977 9978 9979 9980 9981 9982 9983 9984 ... and 16 more

19403

Credit

Kostya Kortchinsky - CERT

CVSSv2 Score

CVSSv2 Base Score = 7.5
Source: nvd.nist.gov | Generated: 2005-08-10 | Disagree?

Blogs

This product uses the Daylife API but is not endorsed or certified by Daylife.

This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.

None found at this time

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.