← back
CVE-2005-1191

CVE-2005-1191

EPSS 19.6%
The Web View DLL (webvw.dll), as used in Windows Explorer on Windows 2000 systems, does not properly filter an apostrophe ("'") in the author name in a document, which allows attackers to execute arbitrary script via extra attributes when Web View constructs a mailto: link for the preview pane when the user selects the file.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/25454unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-024http://security.greymagic.com/security/advisories/gm015-iehttps://exchange.xforce.ibmcloud.com/vulnerabilities/20380https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3585http://www.securityfocus.com/archive/1/396224http://www.securityfocus.com/bid/13248http://www.vupen.com/english/advisories/2005/0509