Intrusion PreventionMS.Windows.Index.Service.Query.Buffer.Overflow
Description
This indicates an attempt to exploit a buffer overflow vulnerability in the Microsoft Indexing Service.
Microsoft Windows XP and Windows Server 2003 do not properly validate the length of Indexing Service messages. A remote or local attacker can exploit this to execute arbitrary code on a vulnerable computer, which could lead to unauthorized access or elevated privileges.
Affected Products
Microsoft Windows XP
Microsoft Windows Server 2003
Impact
System compromise: remote code execution.
Recommended Actions
Microsoft has released updates to address this vulnerability. Please apply update MS05-003.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2020-12-11 | 16.978 |
| ID | 11761 |
| Created | Mar 16, 2006 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2004-0897 |
| Exploit Prediction Score | 59.25% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |