CVE-2005-2118: microsoft windows_2003_server
Vulnerability summary
CVE-2005-2118 is a medium (CVSS 5.1) vulnerability in microsoft windows_2003_server. EPSS estimates a 47.66% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities.
Timeline
- 21-10-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
47.66%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.29 pp
From 47.37% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
1 vendor · 1 product
References
11 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1192VDB EntrySignatureX Refsource OVAL
- support.avaya.com/elmodocs2/security/ASA-2005-214.pdfX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1116VDB EntrySignatureX Refsource OVAL
- docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049Vendor AdvisoryX Refsource MS
Show all 11 references
- www.us-cert.gov/cas/techalerts/TA05-284A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource