CVE-2005-1983 Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and loca...
HighCVSS 10.0
EPSS 93.1%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 20050811 Windows 2000 universal exploit for MS05-039 mailing-list
- 16372 third-party-advisory
- 1014640 vdb-entry
- P-266 government-resource third-party-advisory
- www.frsirt.com
- www.hsc.fr
- VU#998653 third-party-advisory us-government-resource
- 18605 vdb-entry
- www.securiteam.com
- 14513 vdb-entry
- TA05-221A patch third-party-advisory us-government-resource
- ADV-2005-1354 vdb-entry
- 20050809 Windows Plug and Play Remote Compromise third-party-advisory
- MS05-039 vendor-advisory
- win-plugandplay-bo(21602) vdb-entry
- oval:org.mitre.oval:def:100073 signature vdb-entry
- oval:org.mitre.oval:def:160 signature vdb-entry
- oval:org.mitre.oval:def:267 signature vdb-entry
- oval:org.mitre.oval:def:474 signature vdb-entry
- oval:org.mitre.oval:def:497 signature vdb-entry
- oval:org.mitre.oval:def:783 signature vdb-entry