Unrated severityNVD Advisory· Published Jan 11, 2005· Updated Jun 16, 2026
CVE-2004-0897
CVE-2004-0897
Description
The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
- (no CPE)
cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
8- www.kb.cert.org/vuls/id/657118nvdPatchThird Party AdvisoryUS Government Resource
- www.ciac.org/ciac/bulletins/p-095.shtmlnvdVendor Advisory
- secunia.com/advisories/13802nvd
- securitytracker.com/idnvd
- www.securityfocus.com/bid/12228nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-003nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2128nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2447nvd
News mentions
0No linked articles in our index yet.