cve/2004/CVE-2004-2289.md

CVE-2004-2289

Description

Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.

POC

Reference

• http://www.freewebs.com/roozbeh_afrasiabi/xploit/execute.htm
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-015

Github

No PoCs found on GitHub currently.