Unscored severity · published Aug 10, 2005
CVE-2005-1983
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a…
–
CVSS
93%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Exploitation
Is it being used?
Exploit prediction (EPSS)93.0% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1983
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1983
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0384.html
secunia.com
http://secunia.com/advisories/16372
securitytracker.com
http://securitytracker.com/id?1014640
www.ciac.org
http://www.ciac.org/ciac/bulletins/p-266.shtml
www.frsirt.com
http://www.frsirt.com/english/alerts/20050814.ZotobA.php
www.hsc.fr
http://www.hsc.fr/ressources/presentations/null_sessions/
More from Windows 2000
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
8.8
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability
7.8
CVE-2010-0232
Microsoft Windows Kernel Exception Handler Vulnerability
7.8
CVE-2009-1123
Microsoft Windows Improper Input Validation Vulnerability
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability