CVE-2005-2935: Unquoted Windows search path vulnerability in Microsoft AntiSpyware might allow local users to execute code...

Security readout for executives and security teams

This old CVE describes a local code-execution risk in Microsoft AntiSpyware caused by an unquoted Windows program path. A local user could place a malicious file at a predictable root path and have the AntiSpyware process run it. The source bundle does not identify affected versions, a patch, or active exploitation. Exposure is most plausible on legacy systems that still have the referenced Microsoft AntiSpyware component installed. The source bundle does not provide affected versions, CPEs, supported platforms, or deployment scope, so exposure must be confirmed by asset inventory. Treat this as a legacy hygiene issue unless affected systems are found. Business urgency rises if old Windows endpoints still run Microsoft AntiSpyware or allow standard users to write executables into root paths. Mitigation focus: Inventory endpoints for Microsoft AntiSpyware or AntiSpywareMain.exe.; Check Microsoft or vendor guidance; the bundle names no patch.; Retire unsupported Microsoft AntiSpyware installations where feasible..

Prepared

Jun 29, 2026, 17:57 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.