CVE-2005-0551 Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain priv...
HighCVSS 10.0
EPSS 20.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in WINSRV.DLL in the Client Server Runtime System (CSRSS) process of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application that provides console window information with a long FaceName value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows 2003 server | = r2 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20050412 Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability patch third-party-advisory vendor-advisory
- MS05-018 vendor-advisory
- oval:org.mitre.oval:def:1822 signature vdb-entry
- oval:org.mitre.oval:def:266 signature vdb-entry
- oval:org.mitre.oval:def:3544 signature vdb-entry
- oval:org.mitre.oval:def:777 signature vdb-entry