PT-2005-2932

CVE-2005-1983

·

Published

2005-08-10

·

Updated

2018-10-12

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to Windows XP Service Pack 2
Description A stack-based buffer overflow issue in the Plug and Play service allows remote attackers to execute arbitrary code via a crafted packet. Local users can also gain privileges by using a malicious application. This issue has been exploited by the Zotob worm.
Recommendations For Microsoft Windows 2000 and Windows XP Service Pack 1, update to a newer service pack or version to resolve the issue. As a temporary workaround, consider restricting access to the Plug and Play service to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Vendors
Affected products
Related identifiers
ARBITRARYCOMMANDEXECUTIONMS05039
Found an issue in the description? Have something to add? Feel free to write us 👾