CVE-2005-2117

Published: Oct 21, 2005Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.

Affected (5)

Products: Microsoft: Windows Explorer, Windows 2000, Windows 2003 Server, Windows Xp

4 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Explorer	All versions

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows 2003 Server	Version r2
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

References (16)

http://secunia.com/advisories/17168

Source: secure@microsoft.com

http://secunia.com/advisories/17172

Source: secure@microsoft.com

http://secunia.com/advisories/17223

Source: secure@microsoft.com

http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

Source: secure@microsoft.com

http://www.securityfocus.com/bid/15064

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA05-284A.html

Source: secure@microsoft.com

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291

Source: secure@microsoft.com

http://secunia.com/advisories/17168