Microsoft FrontPage Server Extensions SmartHTML Buffer Overflow Vulnerability

Bugtraq ID:	5804
Class:	Boundary Condition Error
CVE:	CAN-2002-0692
Remote:	Yes
Local:	No
Published:	Sep 25 2002 12:00AM
Updated:	Sep 25 2002 12:00AM
Credit:	Discovery is credited to Maninder Bharadwaj of the Digital Defense Services part of Digital GlobalSoft Ltd..
Vulnerable:	Microsoft Windows XP Professional Microsoft Windows XP Home Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server + Avaya S8100 Media Servers Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft FrontPage Server Extensions 2002 Microsoft FrontPage Server Extensions 2000 + Microsoft Windows 2000 Advanced Server SP3 + Microsoft Windows 2000 Advanced Server SP2 + Microsoft Windows 2000 Advanced Server SP1 + Microsoft Windows 2000 Advanced Server + Microsoft Windows 2000 Datacenter Server SP3 + Microsoft Windows 2000 Datacenter Server SP2 + Microsoft Windows 2000 Datacenter Server SP1 + Microsoft Windows 2000 Datacenter Server + Microsoft Windows 2000 Professional SP3 + Microsoft Windows 2000 Professional SP2 + Microsoft Windows 2000 Professional SP1 + Microsoft Windows 2000 Professional + Microsoft Windows 2000 Server SP3 + Microsoft Windows 2000 Server SP2 + Microsoft Windows 2000 Server SP1 + Microsoft Windows 2000 Server + Microsoft Windows XP Home SP1 + Microsoft Windows XP Home + Microsoft Windows XP Professional SP1 + Microsoft Windows XP Professional

Not Vulnerable:	Microsoft Windows XP Professional SP1 Microsoft Windows XP Home SP1