MS05-049: Vulnerabilities in Windows Shell Could Allow Remote Code Execution (900725)
High Nessus Plugin ID 20002
SynopsisVulnerabilities in the Windows Shell could allow an attacker to execute arbitrary code on the remote host.
DescriptionThe remote version of Windows contains a version of the Windows Shell that has several vulnerabilities. An attacker may exploit these vulnerabilities by :
- Sending a malformed .lnk file a to user on the remote host to trigger an overflow.
- Sending a malformed HTML document to a user on the remote host and have him view it in the Windows Explorer preview pane.
SolutionMicrosoft has released a set of patches for Windows 2000, XP and 2003.