CVE-2005-0063
Last modified
CVE-2005-0063 is a vulnerability of currently unknown severity. The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.. EPSS estimates a 51.68% chance of exploitation in the next 30 days.
Description
The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Windows 2000 | All versions | — |
| Microsoft | Windows 2003 Server | enterprise | — |
| Microsoft | Windows 2003 Server | r2 | — |
| Microsoft | Windows 2003 Server | standard | — |
| Microsoft | Windows 2003 Server | web | — |
| Microsoft | Windows 98 | All versions | Gold |
| Microsoft | Windows 98se | All versions | — |
| Microsoft | Windows Me | All versions | — |
| Microsoft | Windows Xp | All versions | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-0063?
How severe is CVE-2005-0063?
How do I fix CVE-2005-0063?
Are you affected by CVE-2005-0063?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST