CVE-2005-2117

Severity: medium (CVSS 5.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 37.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-10-21 · updated 2026-06-16

Description

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.

Affected products

Microsoft Windows 2000: all versions
Microsoft Windows 2003 Server: r2
Microsoft Windows Explorer: all versions
Microsoft Windows XP Service Pack 3: all versions

References

http://secunia.com/advisories/17168
http://secunia.com/advisories/17172
http://secunia.com/advisories/17223
http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
http://www.securityfocus.com/bid/15064
http://www.us-cert.gov/cas/techalerts/TA05-284A.html
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1291
http://secunia.com/advisories/17168
http://secunia.com/advisories/17172
http://secunia.com/advisories/17223
http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

Get alerted when CVE-2005-2117 or the next vulnerability affects your stack