Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2004-2289

Description

Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.

POC

Reference

- http://www.freewebs.com/roozbeh_afrasiabi/xploit/execute.htm

- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015

Github

No PoCs found on GitHub currently.