exploit-db-mirror/exploits/windows/remote/25454.txt
Offensive Security d304cc3d3e DB: 2017-11-24
116602 new exploits

Too many to list!
2017-11-24 20:56:23 +00:00

9 lines
No EOL
908 B
Text

source: http://www.securityfocus.com/bid/13248/info
Microsoft Windows Explorer is prone to a script injection vulnerability. This occurs when the Windows Explorer preview pane (Web View) is enabled on Windows 2000 computers. Windows 98/98SE/ME are also affected by this issue. If a file with malicious attributes is selected using Explorer, script code contained in the attribute fields may be executed with the privilege level of the user that invoked Explorer. This could be exploited to gain unauthorized access to the vulnerable computer in the context of the currently logged in user.
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/25454-1.doc
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/25454-2.doc
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/bin-sploits/25454-3.doc