CVE-2005-0063

Current Description

The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.

Basic Data

PublishedMay 02, 2005
Last ModifiedApril 30, 2019
Assignercve@mitre.org
Data TypeCVE
Data FormatMITRE
Data Version4.0
Problem TypeNVD-CWE-Other
CVE Data Version4.0

Base Metric V2

CVSS 2 - Version2.0
CVSS 2 - Vector StringAV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS 2 - Access VectorNETWORK
CVSS 2 - Access ComplexityLOW
CVSS 2 - AuthenticationNONE
CVSS 2 - Confidentiality ImpactPARTIAL
CVSS 2 - Availability ImpactPARTIAL
CVSS 2 - Base Score7.5
SeverityHIGH
Exploitability Score10.0
Impact Score6.4
Obtain All Privilegefalse
Obtain User Privilegetrue
Obtain Other Privilegefalse

Base Metric V3

No data provided.

Configurations

  • OR - Configuration 1
    Cpe VersionPartVendorProductVersionUpdateEditionLanguageSW EditionTarget SWTarget HWOtherVersion Start IncludingVersion End IncludingVersion Start ExcludingVersion End Excluding
    2.3OSMicrosoftWindows 2000********
    2.3OSMicrosoftWindows 2000*sp1******
    2.3OSMicrosoftWindows 2000*sp2******
    2.3OSMicrosoftWindows 2000*sp3******
    2.3OSMicrosoftWindows 2000*sp4******
    2.3OSMicrosoftWindows 2003 Serverenterprise*64-bit*****
    2.3OSMicrosoftWindows 2003 Serverr2*64-bit*****
    2.3OSMicrosoftWindows 2003 Serverstandard*64-bit*****
    2.3OSMicrosoftWindows 2003 Serverweb*******
    2.3OSMicrosoftWindows 98*gold******
    2.3OSMicrosoftWindows 98se********
    2.3OSMicrosoftWindows Me********
    2.3OSMicrosoftWindows Xp**home*****
    2.3OSMicrosoftWindows Xp**media_center*****
    2.3OSMicrosoftWindows Xp*goldprofessional*****
    2.3OSMicrosoftWindows Xp*sp164-bit*****
    2.3OSMicrosoftWindows Xp*sp1home*****
    2.3OSMicrosoftWindows Xp*sp1media_center*****
    2.3OSMicrosoftWindows Xp*sp2home*****
    2.3OSMicrosoftWindows Xp*sp2media_center*****
    2.3OSMicrosoftWindows Xp*sp2tablet_pc*****

Vulnerable Software List

VendorProductVersions
Microsoft Windows Xp *
Microsoft Windows 98 *
Microsoft Windows 2000 *
Microsoft Windows 2003 Server enterprise, r2, standard, web
Microsoft Windows 98se *
Microsoft Windows Me *

References

NameSourceURLTags
20050529 Spam exploiting MS05-016http://marc.info/?l=bugtraq&m=111755356016155&w=2BUGTRAQ
20050412 Microsoft MSHTA Script Execution Vulnerabilityhttp://www.idefense.com/application/poi/display?id=231&type=vulnerabilitiesIDEFENSEPatch
http://www.securiteam.com/exploits/5YP0T0AFFW.htmlhttp://www.securiteam.com/exploits/5YP0T0AFFW.htmlMISC
13132http://www.securityfocus.com/bid/13132BID
ADV-2005-0335http://www.vupen.com/english/advisories/2005/0335VUPEN
MS05-016https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-016MS
oval:org.mitre.oval:def:2184https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2184OVAL
oval:org.mitre.oval:def:3456https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A3456OVAL
oval:org.mitre.oval:def:407https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A407OVAL
oval:org.mitre.oval:def:4710https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4710OVAL
oval:org.mitre.oval:def:573https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A573OVAL
oval:org.mitre.oval:def:587https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A587OVAL