CVE-2005-2117

CVE Database · CVE-2005-2117

CVE-2005-2117

· N/AModified

CVSS v3.1

N/A

EPSS

37.04%

Published

Oct 21, 2005

Modified

Apr 15, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.

Affected Products (5)

microsoft · windows_explorervulnerable

microsoft · windows_2000vulnerable

microsoft · windows_2003_servervulnerable

microsoft · windows_xpvulnerable

References (16)

http://secunia.com/advisories/17168

http://secunia.com/advisories/17172

http://secunia.com/advisories/17223

http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

http://www.securityfocus.com/bid/15064

http://www.us-cert.gov/cas/techalerts/TA05-284A.html

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291

http://secunia.com/advisories/17168

http://secunia.com/advisories/17172

http://secunia.com/advisories/17223

KEV Catalog EPSS Scores Vendors All CVEs