CVE-2005-0044

The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."

• https://www.kb.cert.org/vuls/id/927889Patch, US Government Resource
• https://www.us-cert.gov/cas/techalerts/TA05-039A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19109
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1180
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3568
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4499
• https://www.kb.cert.org/vuls/id/927889Patch, US Government Resource
• https://www.us-cert.gov/cas/techalerts/TA05-039A.htmlUS Government Resource
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-012
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19109
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1180
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3568
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4499

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0036The DNS implementation in DeleGate 8.10.2 and earlier allows…
• CVE-2005-0037The DNS implementation of DNRD before 2.10 allows remote att…
• CVE-2005-0038The DNS implementation of PowerDNS 2.9.16 and earlier allows…
• CVE-2005-0039Certain configurations of IPsec, when using Encapsulating Se…
• CVE-2005-0040Multiple cross-site scripting (XSS) vulnerabilities in DotNe…
• CVE-2005-0043Buffer overflow in Apple iTunes 4.7 allows remote attackers …
• CVE-2005-0045The Server Message Block (SMB) implementation for Windows NT…
• CVE-2005-0047Windows 2000, XP, and Server 2003 does not properly "validat…
• CVE-2005-0048Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Serv…
• CVE-2005-0049Windows SharePoint Services and SharePoint Team Services for…
• CVE-2005-0050The License Logging service for Windows NT Server, Windows 2…
• CVE-2005-0051The Server service (srvsvc.dll) in Windows XP SP1 and SP2 al…