CVE-2005-2122

no score yetEPSS 46%

Windows Shell for Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 allows remote attackers to execute arbitrary commands via a shortcut (.lnk) file with long font properties that lead to a buffer overflow in the Client/Server Runtime Server Subsystem (CSRSS), a different vulnerability than CVE-2005-2118.

EPSS: 46% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2005-10-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_2000
microsoft:windows_2003_server
microsoft:windows_xp

References

http://secunia.com/advisories/17168
http://secunia.com/advisories/17172
http://secunia.com/advisories/17223
http://securitytracker.com/id?1015040
http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

Check your stack JSON