Microsoft Windows XP Explorer allows local users to execute arbitrary code via a system folder with a Desktop.ini file containing a .ShellClassInfo specifier with a CLSID value that is associated with an executable file.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Windows_xp | Microsoft | * | * |