CVE-2005-4360

CVE-2005-4360 describes a critical vulnerability in the URL parser of Microsoft IIS 5.1 on Windows XP Professional SP2, allowing remote attackers to execute arbitrary code. This is achieved by sending specific requests to ".dll" followed by arguments like "~0" through "~9", which leads to incorrect handling of ntdll.dll return values by IIS. The vulnerability has a high CVSS score of 7.8 (AV:N/AC:L/Au:N/C:N/I:C/A:N), indicating it can be exploited remotely with low complexity to achieve complete integrity impact, though it was initially believed to only cause a denial of service. While not listed in CISA's KEV catalog, exploit code for denial of service is available on ExploitDB, and the vulnerability has a high EPSS score, suggesting a significant probability of exploitation despite limited community discussion or media coverage.