How severe is CVE-2005-2117?

CVE-2005-2117 has a CVSS 2.0 base score of 5.1, rated medium severity.

Is CVE-2005-2117 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 37% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-2117?

CVE-2005-2117 primarily affects Microsoft Windows Explorer. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2005-2117?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2005-2117 published?

CVE-2005-2117 was published on 2005-10-21 and last updated on 2026-06-16.

CVE-2005-2117

CVE-2005-2117 is a medium-severity vulnerability in Microsoft Windows Explorer with a CVSS 2.0 base score of 5.1. Its EPSS exploit-prediction score of 37% places it in the 98th percentile, indicating an elevated likelihood of exploitation.

Key facts

Severity: Medium (CVSS 2.0 base score 5.1)
EPSS exploit prediction: 37% (98th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Microsoft Windows Explorer
Published: 2005-10-21
Last modified: 2026-06-16

Description

Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.

Frequently asked questions

What is CVE-2005-2117?: Web View in Windows Explorer on Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 does not properly handle certain HTML characters in preview fields, which allows remote user-assisted attackers to execute arbitrary code.
How severe is CVE-2005-2117?: CVE-2005-2117 has a CVSS 2.0 base score of 5.1, rated medium severity.
Is CVE-2005-2117 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 37% (98th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-2117?: CVE-2005-2117 primarily affects Microsoft Windows Explorer. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2005-2117?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2005-2117 published?: CVE-2005-2117 was published on 2005-10-21 and last updated on 2026-06-16.

References

Affected products (5)

cpe:2.3:a:microsoft:windows_explorer:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2000:*:sp4:*:fr:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:r2:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp1:tablet_pc:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*

More vulnerabilities in Microsoft Windows Explorer

CVE-1999-0967 — Critical (CVSS 10.0): Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local…
CVE-2007-1347 — High (CVSS 7.1): Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows…
CVE-2007-1090 — High (CVSS 7.1): Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service…
CVE-2005-0954 — Medium (CVSS 5.0): Windows Explorer and Internet Explorer in Windows 2000 SP1 allows remote attackers to cause a denial of service (CPU…
CVE-2007-0562 — Medium (CVSS 4.3): Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to…
CVE-2006-6602 — Medium (CVSS 4.3): explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to…

All CVEs affecting Microsoft Windows Explorer →