CVE-2005-0545

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-02-25 · updated 2026-06-16

Description

Microsoft Windows XP Pro SP2 and Windows 2000 Server SP4 running Active Directory allow local users to bypass group policies that restrict access to hidden drives by using the browse feature in Office 10 applications such as Word or Excel, or using a flash drive. NOTE: this issue has been disputed in a followup post.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows XP Service Pack 3: all versions

References

http://marc.info/?l=bugtraq&m=110935549821930&w=2
http://www.securityfocus.com/archive/1/391332
http://www.securityfocus.com/bid/12641
http://marc.info/?l=bugtraq&m=110935549821930&w=2
http://www.securityfocus.com/archive/1/391332
http://www.securityfocus.com/bid/12641

Get alerted when CVE-2005-0545 or the next vulnerability affects your stack