CVE-2004-2289

Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.

• http://archives.neohapsis.com/archives/bugtraq/2004-05/0168.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/11633Vendor Advisory
• http://www.freewebs.com/roozbeh_afrasiabi/xploit/execute.htmExploit
• http://www.osvdb.org/6221Exploit
• http://www.securityfocus.com/bid/10363
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16171
• http://archives.neohapsis.com/archives/bugtraq/2004-05/0168.htmlExploit, Vendor Advisory
• http://secunia.com/advisories/11633Vendor Advisory
• http://www.freewebs.com/roozbeh_afrasiabi/xploit/execute.htmExploit
• http://www.osvdb.org/6221Exploit
• http://www.securityfocus.com/bid/10363
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16171

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2283Unknown vulnerability in DansGuardian before 2.6.1-13 allows…
• CVE-2004-2284The read_list_from_file function in vacation.pl for OpenWebm…
• CVE-2004-2285Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2004-2286Integer overflow in the duplication operator in ActivePerl a…
• CVE-2004-2287Directory traversal vulnerability in explorer.php in DSM Lig…
• CVE-2004-2288Cross-site scripting (XSS) vulnerability in index.php in Jel…
• CVE-2004-2290Microsoft Windows XP Explorer allows attackers to execute ar…
• CVE-2004-2291Microsoft Windows Internet Explorer 5.5 and 6.0 allows remot…
• CVE-2004-2292Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attacke…
• CVE-2004-2293Multiple cross-site scripting (XSS) vulnerabilities in PHP-N…
• CVE-2004-2294Canonicalize-before-filter error in the send_review function…
• CVE-2004-2295SQL injection vulnerability in the Reviews module in PHP-Nuk…