VULNERABILITY INTELLIGENCE
CVE-2005-2117
CVSS score5.1 MEDIUM
EPSS probability37.61%
CISA KEVNot currently listed
Published2005-10-21
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
Primary references
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com
- secure@microsoft.com — US Government Resource
- secure@microsoft.com
- secure@microsoft.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108