CVE-2005-2120 Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary cod...
MediumCVSS 6.5
EPSS 62.0%
Framework module
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows 2000 | All versions | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- 17166 patch third-party-advisory vendor-advisory
- 17172 third-party-advisory
- 17223 third-party-advisory
- 71 third-party-advisory
- 1015042 patch vdb-entry
- support.avaya.com
- AD20051011c patch third-party-advisory vendor-advisory
- VU#214572 third-party-advisory us-government-resource
- 18830 vdb-entry
- 15065 exploit patch vdb-entry
- TA05-284A third-party-advisory us-government-resource
- MS05-047 vendor-advisory
- oval:org.mitre.oval:def:1244 signature vdb-entry
- oval:org.mitre.oval:def:1328 signature vdb-entry
- oval:org.mitre.oval:def:1519 signature vdb-entry