CVE-2005-2122

Severity

99%

Complexity

99%

Confidentiality

165%

Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.

Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.

CVSS 2.0 Base Score 9.9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:C/I:C/A:C).

Overview

Type

Microsoft

First reported 19 years ago

2005-10-21 18:02:00

Last updated 5 years ago

2019-04-30 14:27:00

Affected Software

Microsoft Windows 2000

Microsoft windows 2000_sp1

Microsoft windows 2000_sp2

Microsoft windows 2000_sp3

Microsoft Windows 2000 Service Pack 4

Microsoft Windows XP Professional Gold

Microsoft Windows XP Service Pack 1 Home Edition

Microsoft windows xp_sp1 media_center

Microsoft windows xp_sp2 tablet_pc

References

17168

Vendor Advisory

17172

Vendor Advisory

17223

Vendor Advisory

1015040

http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

http://www.argeniss.com/research/MSBugPaper.pdf

Vendor Advisory

VU#922708

Third Party Advisory, US Government Resource

15069

TA05-284A

Third Party Advisory, US Government Resource

MS05-049

oval:org.mitre.oval:def:1329

oval:org.mitre.oval:def:1488

oval:org.mitre.oval:def:1517

oval:org.mitre.oval:def:1537

oval:org.mitre.oval:def:1551

oval:org.mitre.oval:def:708

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.