CVEvulnerability
CVE-2005-2117
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-10-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
Affected configurations
• microsoft windows explorer
• microsoft windows 2000
• microsoft windows 2003 server r2
• microsoft windows xp
References
- http://secunia.com/advisories/17168 secunia.com
- http://secunia.com/advisories/17172 secunia.com
- http://secunia.com/advisories/17223 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf support.avaya.com
- http://www.securityfocus.com/bid/15064 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA05-284A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291 oval.cisecurity.org
- http://secunia.com/advisories/17168 secunia.com
- http://secunia.com/advisories/17172 secunia.com
- http://secunia.com/advisories/17223 secunia.com
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf support.avaya.com
- http://www.securityfocus.com/bid/15064 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA05-284A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291 oval.cisecurity.org