CVE-2005-2122

Vulnerability

A buffer overflow vulnerability exists in the Windows Shell component of Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Windows Server 2003 (including SP1 and x64 editions) when processing shortcut (.lnk) files with overly long font properties. This overflow occurs in the Client/Server Runtime Server Subsystem (CSRSS), allowing an attacker to corrupt memory. The vulnerability is distinct from CVE-2005-2118. [1][2]

Exploitation

An attacker must craft a malicious .lnk file with specially crafted font properties that trigger the buffer overflow when the file is opened by the user. The attacker can deliver the file via email, a web link, or other means that cause the user to open the shortcut. No authentication is required, and the user interaction is limited to opening the file. [1][2]

Impact

Successful exploitation allows remote code execution with the privileges of the user. If the user has administrative rights, the attacker can gain complete control of the system, install programs, view/change data, or create new accounts. The vulnerability is rated Important by Microsoft. [1][2]

Mitigation

Microsoft released security update MS05-049 on October 11, 2005, which addresses this vulnerability for all affected Windows versions. Customers should apply the update at the earliest opportunity. No workarounds are documented in the available references. [1]