• info
• discussion
• exploit
• solution
• references

Microsoft AntiSpyware CVE-2005-2935 Local Security Vulnerability

Microsoft AntiSpyware is prone to a local security vulnerability. Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe. NOTE: it is not clear whether this overlaps CVE-2005-2940.