Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-2289. PoCs published by Roozbeh Afrasiabi.
AI-analyzed exploit summary This exploit leverages a vulnerability in Windows Explorer on Windows XP, allowing arbitrary code execution when a malicious folder is accessed. The PoC demonstrates executing NetMeeting and installing a keylogger by referencing executable content within the folder.
Description
Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.
Exploits (1)
This exploit leverages a vulnerability in Windows Explorer on Windows XP, allowing arbitrary code execution when a malicious folder is accessed. The PoC demonstrates executing NetMeeting and installing a keylogger by referencing executable content within the folder.