CVE

Id
13328  
CVE No.
CVE-2005-2122  
Status
Candidate  
Description
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.  
Phase
Assigned (20050702)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
96475 13328 CVE-2005-2122 VULNWATCH:20051019 [Argeniss] Story of a dumb patch (Paper advisory about CSRSS and Windows Explorer vulnerabilities)  View
96476 13328 CVE-2005-2122 MISC:http://www.argeniss.com/research/MSBugPaper.pdf  View
96477 13328 CVE-2005-2122 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf  View
96478 13328 CVE-2005-2122 MS:MS05-049  View
96479 13328 CVE-2005-2122 URL:http://www.microsoft.com/technet/security/bulletin/ms05-049.mspx  View
96480 13328 CVE-2005-2122 CERT:TA05-284A  View
96481 13328 CVE-2005-2122 URL:http://www.us-cert.gov/cas/techalerts/TA05-284A.html  View
96482 13328 CVE-2005-2122 CERT-VN:VU#922708  View
96483 13328 CVE-2005-2122 URL:http://www.kb.cert.org/vuls/id/922708  View
96484 13328 CVE-2005-2122 BID:15069  View
96485 13328 CVE-2005-2122 URL:http://www.securityfocus.com/bid/15069  View
96486 13328 CVE-2005-2122 OVAL:oval:org.mitre.oval:def:1329  View
96487 13328 CVE-2005-2122 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1329  View
96488 13328 CVE-2005-2122 OVAL:oval:org.mitre.oval:def:1488  View
96489 13328 CVE-2005-2122 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1488  View
96490 13328 CVE-2005-2122 OVAL:oval:org.mitre.oval:def:1517  View
96491 13328 CVE-2005-2122 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1517  View
96492 13328 CVE-2005-2122 OVAL:oval:org.mitre.oval:def:1537  View
96493 13328 CVE-2005-2122 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1537  View
96494 13328 CVE-2005-2122 OVAL:oval:org.mitre.oval:def:1551  View
96495 13328 CVE-2005-2122 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1551  View
96496 13328 CVE-2005-2122 OVAL:oval:org.mitre.oval:def:708  View
96497 13328 CVE-2005-2122 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:708  View
96498 13328 CVE-2005-2122 SECTRACK:1015040  View
96499 13328 CVE-2005-2122 URL:http://securitytracker.com/id?1015040  View
96500 13328 CVE-2005-2122 SECUNIA:17168  View
96501 13328 CVE-2005-2122 URL:http://secunia.com/advisories/17168  View
96502 13328 CVE-2005-2122 SECUNIA:17172  View
96503 13328 CVE-2005-2122 URL:http://secunia.com/advisories/17172  View
96504 13328 CVE-2005-2122 SECUNIA:17223  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62466 JVNDB-2005-000668 Microsoft Windows の不正な WMF ファイルのレンダリング処理による整数オーバフローの脆弱性 Microsoft Windows の Graphics Rendering Engine (GDI32.DLL) には、不正な Windows メタファイル (WMF) をレンダリング処理する際に整数オーバーフローの脆弱性が存在します。 CVE-2005-2124 13328 7.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000668.html  View