Code Execution Vulnerability in Microsoft Windows Document Processing Component
CVE-2005-0063
Currently unrated
Key Information:
- Vendor
Microsoft
- Vendor
- CVE Published:
- 2 May 2005
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 69%
What is CVE-2005-0063?
This vulnerability affects Microsoft Windows' document processing applications, particularly allowing attackers to execute arbitrary code by altering the CLSID stored in a file. If a malicious document is processed by the HTML Application Host (MSHTA), it may lead to unauthorized command execution. This has been demonstrated using Microsoft Word documents, making users vulnerable when opening documents crafted to exploit this flaw.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.