CVE-2005-2118

no score yetEPSS 48%

Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote user-assisted attackers to execute arbitrary commands via a crafted shortcut (.lnk) file with long font properties that lead to a buffer overflow when the user views the file's properties using Windows Explorer, a different vulnerability than CVE-2005-2122.

EPSS: 48% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2005-10-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_2000
microsoft:windows_2003_server
microsoft:windows_xp

References

http://secunia.com/advisories/17168
http://secunia.com/advisories/17172
http://secunia.com/advisories/17223
http://securitytracker.com/id?1015040
http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

Check your stack JSON