CVE-2005-2935

Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code via a malicious c:\program.exe file, which is run by AntiSpywareMain.exe when it attempts to execute gsasDtServ.exe. NOTE: it is not clear whether this overlaps CVE-2005-2940...

CVE-2005-2935

The CVE-2005-2935 entry covers an Unquoted Windows search path vulnerability in Microsoft AntiSpyware (AntispywareMain.exe) that could allow local code execution by placing a malicious c:\program.exe. The issue stems from an unquoted search path when AntiSpyware attempts to execute gsasDtServ.exe...