CVE-2005-2120
50Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 62%
da publicação à arma8 dias
Publicada no NVD13 de out.
1ª PoC+8d
probabilidade de exploração
62%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/1269não verificadoexploitdbwww.exploit-db.com/exploits/1271não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047http://secunia.com/advisories/17166http://secunia.com/advisories/17172http://secunia.com/advisories/17223http://securityreason.com/securityalert/71http://securitytracker.com/id?1015042https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdfhttp://www.eeye.com/html/research/advisories/AD20051011c.htmlhttp://www.kb.cert.org/vuls/id/214572