CVE-2005-2122: microsoft windows_2003_server
Vulnerability summary
CVE-2005-2122 is a high (CVSS 10.0) vulnerability in microsoft windows_2003_server. EPSS estimates a 46.43% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities.
Timeline
- 21-10-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
46.43%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+2.64 pp
From 43.80% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
1 vendor · 1 product
References
16 links- support.avaya.com/elmodocs2/security/ASA-2005-214.pdfX Refsource CONFIRM
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1329VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1488VDB EntrySignatureX Refsource OVAL
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A708VDB EntrySignatureX Refsource OVAL
- docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-049Vendor AdvisoryX Refsource MS
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1537VDB EntrySignatureX Refsource OVAL
Show all 16 references
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1517VDB EntrySignatureX Refsource OVAL
- www.us-cert.gov/cas/techalerts/TA05-284A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1551VDB EntrySignatureX Refsource OVAL