CVE-2005-2120: Buffer Overflow
Stack-based buffer overflow in the Plug and Play (PnP) service (UMPNPMGR.DLL) in Microsoft Windows 2000 SP4, and XP SP1 and SP2, allows remote or local authenticated attackers to execute arbitrary code via a large number of "\" (backslash) characters in a registry key name, which triggers the overflow in a wsprintfW function call.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2120?
CVE-2005-2120 has a critical severity rating due to its potential for remote code execution.
How do I fix CVE-2005-2120?
To fix CVE-2005-2120, users should apply the latest security updates from Microsoft for Windows 2000 SP4 and Windows XP SP1/SP2.
What platforms are affected by CVE-2005-2120?
CVE-2005-2120 affects Microsoft Windows 2000 SP4 and Microsoft Windows XP SP1 and SP2.
Who can exploit CVE-2005-2120?
CVE-2005-2120 can be exploited by both local and remote authenticated attackers.
What type of vulnerability is CVE-2005-2120?
CVE-2005-2120 is a stack-based buffer overflow vulnerability in the Plug and Play service.