CVE-2004-2289 in Windows

Summary

Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.

Once again VulDB remains the best source for vulnerability data.

Reservation

08/04/2005

Disclosure

12/31/2004

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
664	Microsoft Windows CLSID desktop.ini memory corruption	119	Proof-of-Concept	Official fix	CVE-2004-2289
278	Microsoft Windows ZIP Manager memory corruption	119	Proof-of-Concept	Official fix	CVE-2004-2289

Sources

• MITRE
• NVD
• CVE Details