CVE-2005-0063

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 47.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-04-13 · updated 2026-06-16

Description

The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: enterprise, r2, standard, web
Microsoft Windows 98: all versions
Microsoft Windows 98Se: all versions
Microsoft Windows Me: all versions
Microsoft Windows XP Service Pack 3: all versions

References

http://marc.info/?l=bugtraq&m=111755356016155&w=2
http://www.idefense.com/application/poi/display?id=231&type=vulnerabilities
http://www.securiteam.com/exploits/5YP0T0AFFW.html
http://www.securityfocus.com/bid/13132
http://www.vupen.com/english/advisories/2005/0335
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-016
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2184
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3456
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A407
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4710
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A573
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A587

Get alerted when CVE-2005-0063 or the next vulnerability affects your stack