CVE-2005-2118

Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

History

20 Nov 2024, 23:58

Type Values Removed Values Added
References () http://secunia.com/advisories/17168 - Vendor Advisory () http://secunia.com/advisories/17168 - Vendor Advisory
References () http://secunia.com/advisories/17172 - Vendor Advisory () http://secunia.com/advisories/17172 - Vendor Advisory
References () http://secunia.com/advisories/17223 - Vendor Advisory () http://secunia.com/advisories/17223 - Vendor Advisory
References () http://securitytracker.com/id?1015040 - () http://securitytracker.com/id?1015040 -
References () http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf - () http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf -
References () http://www.argeniss.com/research/MSBugPaper.pdf - Vendor Advisory () http://www.argeniss.com/research/MSBugPaper.pdf - Vendor Advisory
References () http://www.securityfocus.com/bid/15070 - () http://www.securityfocus.com/bid/15070 -
References () http://www.us-cert.gov/cas/techalerts/TA05-284A.html - Third Party Advisory, US Government Resource () http://www.us-cert.gov/cas/techalerts/TA05-284A.html - Third Party Advisory, US Government Resource
References () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 - () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1116 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1116 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1192 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1192 -

Information

Published : 2005-10-21 18:02

Updated : 2024-11-20 23:58


NVD link : CVE-2005-2118

Mitre link : CVE-2005-2118

CVE.ORG link : CVE-2005-2118


JSON object : View

Products Affected

microsoft

  • windows_2000
  • windows_xp
  • windows_2003_server