CVE-2005-2679

CRÍTICO 10.0CVE-2005-2679 · Published 23/08/2005 · updated 16/06/2026

En resumen

CVE-2005-2679 es una vulnerabilidad CRÍTICO (CVSS 10.0) que afecta a process explorer (sysinternals).
Probabilidad de explotación en los próximos 30 días (EPSS): 3.5%, mayor que el 89.1% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
process explorer sysinternals	`= 9.23.0.0`	No fix yet

Description

Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.

References

secunia.com/advisories/16525
securitytracker.com/id · Exploit
securityfocus.com/bid/14616 · Exploit
sysinternals.com/Forum/forum_posts.asp

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free