Description
Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
References (8)
Core 8
Core References
Vendor Advisory x_refsource_confirm
http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17223
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17168
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17172
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15064
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA05-284A.html
Scores
EPSS
0.3704
EPSS Percentile
98.4%
Details
Status
published
Products (4)
microsoft/windows_2000
microsoft/windows_2003_server
r2
microsoft/windows_explorer
microsoft/windows_xp
(2 CPE variants)
Published
Oct 21, 2005
Tracked Since
Feb 18, 2026