PT-2005-1598 · Microsoft · Office+2

Denis Jedig · Published 2005-02-25 · Updated 2019-04-30 · CVE-2005-0545

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows XP Pro version SP2 Microsoft Windows 2000 Server version SP4

Description The issue allows local users to bypass group policies that restrict access to hidden drives. This can be achieved by using the browse feature in Office 10 applications, such as Word or Excel, or by using a flash drive.

Recommendations For Microsoft Windows XP Pro SP2, consider restricting access to Office 10 applications or disabling the browse feature as a temporary workaround. For Microsoft Windows 2000 Server SP4, consider restricting access to Office 10 applications or disabling the browse feature as a temporary workaround. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0545

Affected Products

Office

Windows 2000 Server

Windows Xp Pro

References · 4

• http://securityfocus.com/archive/1/391332 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0545 · Security Note
• http://securityfocus.com/bid/12641 · Note
• http://marc.info/?l=bugtraq&m=110935549821930&w=2 · Note