CVE-2005-0063
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 48%
from disclosure to weapon1 days
Published on NVDApr 13
1st PoC+1d
exploitation probability
48%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/938⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://marc.info/?l=bugtraq&m=111755356016155&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-016https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2184https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3456https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A407https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4710https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A573https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A587http://www.idefense.com/application/poi/display?id=231&type=vulnerabilitieshttp://www.securiteam.com/exploits/5YP0T0AFFW.htmlhttp://www.securityfocus.com/bid/13132http://www.vupen.com/english/advisories/2005/0335