CVE-2005-0044
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003,...
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."
- Record
CVE-2005-0044- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."
- Record
CVE-2005-0044- Updated
- 2026-11-02
EUVDEUVD-2005-0045 No score
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."
- Record
EUVD-2005-0045- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m4w4-9m3w-pg34 No score
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003,...
The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the "Input Validation Vulnerability."
- Record
GHSA-m4w4-9m3w-pg34- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0044 is a high vulnerability (CVSS 7.5) in Microsoft Exchange Server, published February 8, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 33.4%, the 98th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2917
exchange.xforce.ibmcloud.com/vulnerabilities/19109
kb.cert.org/vuls/id/927889
us-cert.gov/cas/techalerts/TA05-039A.html