CVE-2005-2118

Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted…

published October 21, 2005

CVSS

—

EPSS

48%

Percentile

98.8

In the wild

Unconfirmed

What it is

Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.47657 · 98.8th percentile
Published: 2005-10-21T04:00Z

EPSS history

Timeline

21 OCT 04:00Z
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted…
cvelistv5