CVE

Id
13326  
CVE No.
CVE-2005-2120  
Status
Candidate  
Description
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.  
Phase
Assigned (20050702)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
96447 13326 CVE-2005-2120 EEYE:AD20051011c  View
96448 13326 CVE-2005-2120 URL:http://www.eeye.com/html/research/advisories/AD20051011c.html  View
96449 13326 CVE-2005-2120 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf  View
96450 13326 CVE-2005-2120 MS:MS05-047  View
96451 13326 CVE-2005-2120 URL:http://www.microsoft.com/technet/security/bulletin/ms05-047.mspx  View
96452 13326 CVE-2005-2120 CERT:TA05-284A  View
96453 13326 CVE-2005-2120 URL:http://www.us-cert.gov/cas/techalerts/TA05-284A.html  View
96454 13326 CVE-2005-2120 CERT-VN:VU#214572  View
96455 13326 CVE-2005-2120 URL:http://www.kb.cert.org/vuls/id/214572  View
96456 13326 CVE-2005-2120 BID:15065  View
96457 13326 CVE-2005-2120 URL:http://www.securityfocus.com/bid/15065  View
96458 13326 CVE-2005-2120 OSVDB:18830  View
96459 13326 CVE-2005-2120 URL:http://www.osvdb.org/18830  View
96460 13326 CVE-2005-2120 OVAL:oval:org.mitre.oval:def:1244  View
96461 13326 CVE-2005-2120 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1244  View
96462 13326 CVE-2005-2120 OVAL:oval:org.mitre.oval:def:1328  View
96463 13326 CVE-2005-2120 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1328  View
96464 13326 CVE-2005-2120 OVAL:oval:org.mitre.oval:def:1519  View
96465 13326 CVE-2005-2120 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1519  View
96466 13326 CVE-2005-2120 SECTRACK:1015042  View
96467 13326 CVE-2005-2120 URL:http://securitytracker.com/id?1015042  View
96468 13326 CVE-2005-2120 SECUNIA:17166  View
96469 13326 CVE-2005-2120 URL:http://secunia.com/advisories/17166  View
96470 13326 CVE-2005-2120 SECUNIA:17172  View
96471 13326 CVE-2005-2120 URL:http://secunia.com/advisories/17172  View
96472 13326 CVE-2005-2120 SECUNIA:17223  View
96473 13326 CVE-2005-2120 URL:http://secunia.com/advisories/17223  View
96474 13326 CVE-2005-2120 SREASON:71  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62395 JVNDB-2005-000597 Microsoft Windows Shell における不正な .lnk ファイルを開くことによるバッファオーバーフローの脆弱性 ------------ CVE-2005-2122 13326 10 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000597.html  View