CVE-2005-2938

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published: Nov 18, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-29397.2Unquoted Windows search path vulnerability in VMWare Workstation 5.0.0 build-13124 might allow local users to gain privileges via a maliciou CVE-2005-29407.2Unquoted Windows search path vulnerability in Microsoft Antispyware 1.0.509 (Beta 1) might allow local users to gain privileges via a malici CVE-2005-29437.5Stack-based buffer overflow in sendmail in XMail before 1.22 allows remote attackers to execute arbitrary code via a long -t command line op CVE-2005-29444.6The perform_file_save function in GNOME Workstation Command Center (gwcc) 0.9.6 and earlier allows local users to create and overwrite arbit CVE-2005-29452.1arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from fi CVE-2005-29467.5The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm CVE-2005-29475.1Buffer overflow in KillProcess 2.20 and earlier allows user-assisted attackers to execute arbitrary code via an exe file with a long FileDes CVE-2005-29482.1KillProcess 2.20 and earlier allows local users to bypass kill list restrictions by launching multiple processes at the same time, which are CVE-2005-29497.5pam_per_user before 0.4 does not verify if the user name changes between authentication attempts and uses the same subrequest handle, which CVE-2005-29504.3Cross-site scripting (XSS) vulnerability in Sawmill 7.0.0 through 7.1.13 allows remote attackers to inject arbitrary web script or HTML via CVE-2005-29517.5Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3, and possibly earlier versions, allows remote attackers to exe CVE-2005-29525.0Directory traversal vulnerability in s.pl in Subscribe Me Pro 2.044.09P and earlier allows remote attackers to read arbitrary files via a ..