Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2005-0063 — Microsoft Windows 2003 Server vulnerability

4 documents4 sources
Severity
7.5HIGHNVD
EPSS
69.8%
top 1.33%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Microsoft Windows 2003 Server
Timeline
PublishedMay 2
Latest updateMay 1

Description

The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: www.idefense.com ↗Patch: www.idefense.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wm9f-fxpg-mf37: The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers t↗2022-05-01
▶
CVEList
CVE-2005-0063: The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers t↗2005-04-13
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows - 'HTA' Script Execution (MS05-016)↗2005-04-14
▶
CVE-2005-0063 — Microsoft vulnerability | cvebase