CVE-2005-2118: Buffer Overflow
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2118?
CVE-2005-2118 has been classified with a medium severity rating due to the potential for remote code execution via a crafted shortcut file.
How do I fix CVE-2005-2118?
To mitigate CVE-2005-2118, users should apply the latest security patches provided by Microsoft for their affected Windows versions.
Which versions of Windows are affected by CVE-2005-2118?
CVE-2005-2118 affects Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003.
Can CVE-2005-2118 be exploited without user intervention?
No, CVE-2005-2118 requires user interaction, specifically viewing the properties of the malicious shortcut file.
What kind of attack vector is associated with CVE-2005-2118?
CVE-2005-2118 exploits the Windows Shell through user-assisted attacks involving specially crafted .lnk files.