What’s Vulnerable › Vulnerabilities

CVE-2005-2935

• Severity: medium (CVSS 4.6 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-09-15 · updated 2026-06-16

Description

Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe. NOTE: it is not clear whether this overlaps CVE-2005-2940.

Affected products

• Microsoft Antispyware: all versions

References

• http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033909.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033910.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033909.html
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-May/033910.html

Get alerted when CVE-2005-2935 or the next vulnerability affects your stack