CVE:CVE-2005-1212
CNNVD:CNNVD-200506-119
Microsoft Windows是微软发布的非常流行的操作系统，Step-by-Step Interactive Training是其中的一个组件。
Microsoft Step-By-Step Interactive Training中存在缓冲区溢出漏洞，起因是书签链接文件中验证数据时的边界条件错误。具体的说，在处理畸形.cbo文件时会出现这个漏洞。典型的.cbo文件内容如下：
[Microsoft Interactive Training]
User=DEFAULT
SerialID=00000000
如果恶意用户能够创建User字段包含有超常字符串的文件的话，就会将用户提供的值拷贝到固定大小的栈缓冲区。这可能允许攻击者覆盖栈内存，如保存的返回地址或SEH指针，从而控制执行流。
成功利用这个漏洞的攻击者可以完全控制受影响的系统。但是，必须用户交互才能完成攻击。
solution:Upgrade microsoft windows_2000 to a higher version than *,*:sp1,*:sp2,*:sp3,*:sp4,and avoid the version *:sp1,*:sp2,*:sp3,*:sp4; Upgrade microsoft windows_2000_terminal_services to a higher version than *,*:sp1,*:sp2,*:sp3,and avoid the version *:sp1,*:sp2,*:sp3; Upgrade microsoft windows_2003_server to a higher version than 64-bit,datacenter_64-bit:sp1,datacenter_64-bit:sp1_beta_1,enterprise,enterprise:sp1,enterprise:sp1_beta_1,enterprise_64-bit,enterprise_64-bit:sp1,enterprise_64-bit:sp1_beta_1,r2,r2:sp1,r2:sp1_beta_1,standard,standard:sp1,standard:sp1_beta_1,standard_64-bit,web,web:sp1,web:sp1_beta_1,and avoid the version 64-bit,datacenter_64-bit:sp1,datacenter_64-bit:sp1_beta_1,enterprise,enterprise:sp1,enterprise:sp1_beta_1,enterprise_64-bit,enterprise_64-bit:sp1,enterprise_64-bit:sp1_beta_1,r2,r2:sp1,r2:sp1_beta_1,standard,standard:sp1,standard:sp1_beta_1,standard_64-bit,web,web:sp1,web:sp1_beta_1; Upgrade microsoft windows_98 to a higher version than *:gold,and avoid the version *:gold; Upgrade microsoft windows_98se to a higher version than *; Upgrade microsoft windows_me to a higher version than *; Upgrade microsoft windows_xp to a higher version than *,*:gold,*:sp1,*:sp2,and avoid the version *:gold,*:sp1,*:sp2