NVD

Id
67829  
Name
CVE-2005-2120  
Description
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-10-13  
Modified Date
2008-09-10  
Seq
2005-2120  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
350982 67829 CVE-2005-2120 oval:org.mitre.oval:def:1244  View
350983 67829 CVE-2005-2120 oval:org.mitre.oval:def:1328  View
350984 67829 CVE-2005-2120 oval:org.mitre.oval:def:1519  View
350985 67829 CVE-2005-2120 71  View
350986 67829 CVE-2005-2120 1015042  View
350987 67829 CVE-2005-2120 http://support.avaya.com/elmodocs2/security/ASA-2005-214.pdf  View
350988 67829 CVE-2005-2120 AD20051011c  View
350989 67829 CVE-2005-2120 VU#214572  View
350990 67829 CVE-2005-2120 MS05-047  View
350991 67829 CVE-2005-2120 15065  View
350992 67829 CVE-2005-2120 TA05-284A  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62394 JVNDB-2005-000596 Microsoft Windows のプラグアンドプレイサービス (UMPNPMGR.DLL) にバッファオーバーフローの脆弱性 Microsoft Windows のプラグアンドプレイサービスが利用する UMPNPMGR.DLL において、PNP_GetDeviceList および PNP_GetDeviceListSize の処理における、wsprintfW() 関数呼び出し時間の入力値チェックが不適切なため、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2005-2120 13324 CVE-2005-2120 67829 6.5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000596.html 2005-10-11 2007-04-01 View