CVE-2005-2120

MEDIUM 6.5CVE-2005-2120 · Published 13/10/2005 · updated 16/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.

References

secunia.com/advisories/17166 · Patch
secunia.com/advisories/17172
secunia.com/advisories/17223
securityreason.com/securityalert/71
securitytracker.com/id · Patch
support.avaya.com/elmodocs2/security/ASA-2005-214.pdf
eeye.com/html/research/advisories/AD20051011c.html · Patch
kb.cert.org/vuls/id/214572 · Third Party Advisory
osvdb.org/18830
securityfocus.com/bid/15065 · Exploit
us-cert.gov/cas/techalerts/TA05-284A.html · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-047
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1244
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1328
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1519

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free