CVE

Id
12397  
CVE No.
CVE-2005-1191  
Status
Candidate  
Description
The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe (""") in the author name in a document, which allows attackers to execute arbitrary script via extra attributes when Web View constructs a mailto: link for the preview pane when the user selects the file.  
Phase
Assigned (20050419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
89083 12397 CVE-2005-1191 BUGTRAQ:20050419 File Selection May Lead to Command Execution (GM#015-IE)  View
89084 12397 CVE-2005-1191 URL:http://www.securityfocus.com/archive/1/396224  View
89085 12397 CVE-2005-1191 MISC:http://security.greymagic.com/security/advisories/gm015-ie  View
89086 12397 CVE-2005-1191 MS:MS05-024  View
89087 12397 CVE-2005-1191 URL:http://www.microsoft.com/technet/security/bulletin/ms05-024.mspx  View
89088 12397 CVE-2005-1191 BID:13248  View
89089 12397 CVE-2005-1191 URL:http://www.securityfocus.com/bid/13248  View
89090 12397 CVE-2005-1191 VUPEN:ADV-2005-0509  View
89091 12397 CVE-2005-1191 URL:http://www.vupen.com/english/advisories/2005/0509  View
89092 12397 CVE-2005-1191 OVAL:oval:org.mitre.oval:def:3585  View
89093 12397 CVE-2005-1191 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3585  View
89094 12397 CVE-2005-1191 XF:windows-web-view-command-execution(20380)  View

Related JVN