CVE-2005-2117
medium · 5.1Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
5.1
CVSS
37.0%
EPSS (exploit prob.)
98th
EPSS percentile
2005-10-21
Published
AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | windows_explorer | all versions |
| microsoft | windows_2000 | all versions |
| microsoft | windows_2003_server | r2 |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/17168
- http://secunia.com/advisories/17172
- http://secunia.com/advisories/17223
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
- http://www.securityfocus.com/bid/15064
- http://www.us-cert.gov/cas/techalerts/TA05-284A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291
- http://secunia.com/advisories/17168
- http://secunia.com/advisories/17172
- http://secunia.com/advisories/17223
- http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
- http://www.securityfocus.com/bid/15064
- http://www.us-cert.gov/cas/techalerts/TA05-284A.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2005-2117