Description Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration Affected Products Product Versions microsoft windows 2003 server 3.1.0.3270
64-bit
datacenter_64-bit sp1
datacenter_64-bit sp1_beta_1
datacenter_edition
datacenter_edition sp1
datacenter_edition sp1_beta_1
datacenter_edition_64-bit
datacenter_edition_64-bit sp1
datacenter_edition_64-bit sp1_beta_1
enterprise
enterprise sp1
enterprise sp1_beta_1
enterprise_64-bit
enterprise_64-bit sp1
enterprise_64-bit sp1_beta_1
enterprise_edition sp1
enterprise_edition sp1_beta_1
enterprise_edition_64-bit
enterprise_edition_64-bit sp1
enterprise_edition_64-bit sp1_beta_1
itanium
r2
r2 sp1
r2 sp1_beta_1
sp1
standard
standard sp1
standard sp1_beta_1
standard_64-bit
web
web sp1
web sp1_beta_1
Viewing 5 of 33 versions. View all CPE cpe:2.3:o:microsoft:windows_2003_server:3.1.0.3270:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:datacenter_edition_64-bit:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:enterprise_edition_64-bit:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:itanium:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:*:datacenter_64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:r2:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:sp1:*:enterprise:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard:sp1_beta_1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:standard_64-bit:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2003_server:web:sp1_beta_1:*:*:*:*:*:* Remediation No remediation found in references. microsoft windows xp ibm_oem_version
ibm_oem_version sp1
CPE cpe:2.3:o:microsoft:windows_xp:*:*:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:embedded:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:64-bit:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:embedded:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:ibm_oem_version:sp1:*:*:*:*:*:* Remediation No remediation found in references.
Change History 7 change records found show changes