CVE-2005-2122 Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a....
HighCVSS 10.0
EPSS 46.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 17168 third-party-advisory vendor-advisory
- 17172 third-party-advisory vendor-advisory
- 17223 third-party-advisory vendor-advisory
- 1015040 vdb-entry
- support.avaya.com
- www.argeniss.com vendor-advisory
- VU#922708 third-party-advisory us-government-resource
- 15069 vdb-entry
- TA05-284A third-party-advisory us-government-resource
- MS05-049 vendor-advisory
- oval:org.mitre.oval:def:1329 signature vdb-entry
- oval:org.mitre.oval:def:1488 signature vdb-entry
- oval:org.mitre.oval:def:1517 signature vdb-entry
- oval:org.mitre.oval:def:1537 signature vdb-entry
- oval:org.mitre.oval:def:1551 signature vdb-entry
- oval:org.mitre.oval:def:708 signature vdb-entry