CVE-2005-3644: High severity Microsoft Windows 2000 vulnerability

Published Nov 17, 2005

Updated

PNPGetDeviceList (upnpgetdevicelist) in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and a different vulnerability than CVE-2005-2120.

Affected Software

13 affected components

Microsoft Windows 2000

Microsoft Windows 2000=sp1

Microsoft Windows 2000=sp2

Microsoft Windows 2000=sp3

Microsoft Windows 2000=sp4

Microsoft Windows XP

Microsoft Windows XP=gold

Microsoft Windows XP=sp1

Microsoft Windows XP=sp2

Event History

Nov 17, 2005

CVE Published

11:02 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2005-3644?

CVE-2005-3644 is classified as a denial of service vulnerability affecting Microsoft Windows 2000 and some versions of Windows XP.

How do I fix CVE-2005-3644?

To mitigate CVE-2005-3644, ensure that your system runs the latest patches from Microsoft, specifically for vulnerable versions.

What systems are affected by CVE-2005-3644?

CVE-2005-3644 affects Microsoft Windows 2000 SP4 and earlier, as well as Windows XP SP1 and earlier versions.

What type of attack does CVE-2005-3644 enable?

CVE-2005-3644 allows remote attackers to potentially cause a denial of service through memory consumption.

Is CVE-2005-3644 related to any other vulnerabilities?

Yes, CVE-2005-3644 is a variant of CVE-2006-6296, which also involves remote code execution issues.