Microsoft Windows MSHTA code execution
Published:		13.04.2005
Source:		MICROSOFT
SecurityVulns ID:		4676
Type:		client
Level:		6/10
Description:		Content type of the file is determined based on CLSID in file content, not by it's extention.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server

Original document		IDEFENSE, iDEFENSE Security Advisory 04.12.05: Microsoft MSHTA Script Execution Vulnerability (13.04.2005)
		MICROSOFT, Microsoft Security Bulletin MS05-016 Vulnerability in Windows Shell that Could Allow Remote Code Execution (893086) (13.04.2005)

Files:		MS05-016 POC
		Microsoft Security Bulletin MS05-016 Vulnerability in Windows Shell that Could Allow Remote Code Execution (893086)
Discuss:		Read or add your comments to this news (0 comments)