CVE

Id
13324  
CVE No.
CVE-2005-2118  
Status
Candidate  
Description
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file"s properties using Windows Explorer, a different vulnerability than CVE-2005-2122.  
Phase
Assigned (20050702)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
96396 13324 CVE-2005-2118 VULNWATCH:20051019 [Argeniss] Story of a dumb patch (Paper advisory about CSRSS and Windows Explorer vulnerabilities)  View
96397 13324 CVE-2005-2118 MISC:http://www.argeniss.com/research/MSBugPaper.pdf  View
96398 13324 CVE-2005-2118 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf  View
96399 13324 CVE-2005-2118 MS:MS05-049  View
96400 13324 CVE-2005-2118 URL:http://www.microsoft.com/technet/security/bulletin/ms05-049.mspx  View
96401 13324 CVE-2005-2118 CERT:TA05-284A  View
96402 13324 CVE-2005-2118 URL:http://www.us-cert.gov/cas/techalerts/TA05-284A.html  View
96403 13324 CVE-2005-2118 BID:15070  View
96404 13324 CVE-2005-2118 URL:http://www.securityfocus.com/bid/15070  View
96405 13324 CVE-2005-2118 OVAL:oval:org.mitre.oval:def:1116  View
96406 13324 CVE-2005-2118 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1116  View
96407 13324 CVE-2005-2118 OVAL:oval:org.mitre.oval:def:1192  View
96408 13324 CVE-2005-2118 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1192  View
96409 13324 CVE-2005-2118 SECTRACK:1015040  View
96410 13324 CVE-2005-2118 URL:http://securitytracker.com/id?1015040  View
96411 13324 CVE-2005-2118 SECUNIA:17168  View
96412 13324 CVE-2005-2118 URL:http://secunia.com/advisories/17168  View
96413 13324 CVE-2005-2118 SECUNIA:17172  View
96414 13324 CVE-2005-2118 URL:http://secunia.com/advisories/17172  View
96415 13324 CVE-2005-2118 SECUNIA:17223  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62394 JVNDB-2005-000596 Microsoft Windows のプラグアンドプレイサービス (UMPNPMGR.DLL) にバッファオーバーフローの脆弱性 Microsoft Windows のプラグアンドプレイサービスが利用する UMPNPMGR.DLL において、PNP_GetDeviceList および PNP_GetDeviceListSize の処理における、wsprintfW() 関数呼び出し時間の入力値チェックが不適切なため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-2120 13324 6.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000596.html  View