Unscored severity · published Oct 13, 2005
CVE-2005-2120
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to…
–
CVSS
62%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
Exploitation
Is it being used?
Exploit prediction (EPSS)62.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
W2
Windows 2000 · Microsoft
All versions, or not specified · source: NVD
WX
Windows XP · Microsoft
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2120
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2120
Patch
http://secunia.com/advisories/17166
secunia.com
http://secunia.com/advisories/17172
secunia.com
http://secunia.com/advisories/17223
securityreason.com
http://securityreason.com/securityalert/71
Patch
http://securitytracker.com/id?1015042
support.avaya.com
http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
More from Windows 2000
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability
8.8
CVE-2009-1537
Microsoft DirectX NULL Byte Overwrite Vulnerability
7.8
CVE-2010-0232
Microsoft Windows Kernel Exception Handler Vulnerability
7.8
CVE-2009-1123
Microsoft Windows Improper Input Validation Vulnerability
7.8
CVE-2004-0210
Microsoft Windows Privilege Escalation Vulnerability