CVE-2005-2935

CVE-2005-2935 describes an unquoted Windows search path vulnerability in Microsoft AntiSpyware. This flaw could allow a local attacker to execute arbitrary code by placing a malicious "c:\program.exe" file, which AntiSpywareMain.exe would inadvertently launch when attempting to execute gsasDtServ.exe. The vulnerability has a CVSS score of 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P), indicating a local attack vector with low complexity, potentially leading to partial confidentiality, integrity, and availability compromise. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code is available via Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are also non-existent, indicating a lack of widespread attention or concern.