A vulnerability classified as problematic has been found in Microsoft Windows (Operating System) (the affected version unknown). Affected is an unknown part of the component Firewall. This is going to have an impact on integrity. CVE summarizes:

the user interface in the windows firewall does not properly display certain malformed entries in the windows registry which makes it easier for attackers with administrator privileges to hide activities if the administrator only uses the windows firewall interface to monitor exceptions. note: the vendor disputes this issue saying that since administrative privileges are already required it is not a vulnerability. cve has not yet formally decided if such "information hiding" issues should be included.

The weakness was published 09/01/2005 as confirmed bulletin (Technet). The advisory is available at microsoft.com. This vulnerability is traded as CVE-2005-2765 since 09/01/2005. The exploitability is told to be easy. Local access is required to approach this attack. A authentication is necessary for exploitation. The technical details are unknown and an exploit is not available.

Applying a patch is able to eliminate this problem. The bugfix is ready for download at microsoft.com.

Similar entry is available at 1726.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion