Unscored CVE-2005-2117 EUVD-2005-2118GHSA-3942-ccxx-8xqv

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML character…

Published Oct 21, 2005 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.

References

http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
17223 third-party-advisory
MS05-049 vendor-advisory
17168 third-party-advisory
17172 third-party-advisory
15064 vdb-entry
oval:org.mitre.oval:def:1291 vdb-entry signature
TA05-284A third-party-advisory