Buffer overflow in Microsoft Step-by-Step Interactive Training (orun32.exe) allows remote attackers to execute arbitrary code via a bookmark link file (.cbo, cbl, or .cbm extension) with a long User field.
Affected Platforms
Microsoft Windows 98Microsoft Windows 98SeMicrosoft Windows MeMicrosoft Windows XpMicrosoft Windows 2000 Terminal ServicesMicrosoft Windows 2000Microsoft Windows 2003 Server