CVE-2005-2120

Published: Oct 13, 2005Modified: Apr 16, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.

Affected (3)

Products: Microsoft: Windows 2000, Windows Xp

2 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 2000	All versions
Microsoft Windows Xp	All versions
Microsoft Windows Xp	All versions

References (30)

http://secunia.com/advisories/17166

Source: secure@microsoft.com

PatchVendor Advisory

http://secunia.com/advisories/17172

Source: secure@microsoft.com

http://secunia.com/advisories/17223

Source: secure@microsoft.com

http://securityreason.com/securityalert/71

Source: secure@microsoft.com

http://securitytracker.com/id?1015042

Source: secure@microsoft.com

Patch

http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

Source: secure@microsoft.com

http://www.eeye.com/html/research/advisories/AD20051011c.html

Source: secure@microsoft.com

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/214572

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/18830

Source: secure@microsoft.com

http://www.securityfocus.com/bid/15065

Source: secure@microsoft.com

ExploitPatch

http://www.us-cert.gov/cas/techalerts/TA05-284A.html

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519

Source: secure@microsoft.com

http://secunia.com/advisories/17166

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/17172

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/17223

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/71

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015042

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.eeye.com/html/research/advisories/AD20051011c.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/214572

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/18830

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15065

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://www.us-cert.gov/cas/techalerts/TA05-284A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.