CVE-2005-2120 in Windows
Сводка (Английский)
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
Once again VulDB remains the best source for vulnerability data.
Резервировать
02.07.2005
Раскрытие
13.10.2005
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 1789 | Microsoft Windows Plug-and-Play Service повреждение памяти | 121 | Высокий | Официальное исправление | CVE-2005-2120 |