CVE-2005-0058

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 46.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-08-10 · updated 2026-06-16

Description

Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: r2
Microsoft Windows 98: all versions
Microsoft Windows 98Se: all versions
Microsoft Windows Me: all versions
Microsoft Windows XP Service Pack 3: all versions

References

http://secunia.com/advisories/16354/
http://securitytracker.com/id?1014639
http://www.securityfocus.com/bid/14518
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-040
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100084
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100085
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100086
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100088
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1075
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1213
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1297
http://secunia.com/advisories/16354/

Get alerted when CVE-2005-0058 or the next vulnerability affects your stack