CVE-2005-3981: Medium severity Microsoft Windows 2000 vulnerability
DISPUTED NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESSTERMINATE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3981?
CVE-2005-3981 has been disputed in severity by third-party analysts, indicating potential variability in its risk assessment.
How can I mitigate CVE-2005-3981?
Mitigation for CVE-2005-3981 may involve restricting local user privileges and monitoring process activities.
Which systems are affected by CVE-2005-3981?
CVE-2005-3981 affects several Microsoft operating systems including Windows XP, 2000, and 2003 with specific service packs.
What kind of attack does CVE-2005-3981 enable?
CVE-2005-3981 may allow local users to terminate writable processes using specific arguments via the CreateRemoteThread function.
Is there an official patch for CVE-2005-3981?
There is no official patch for CVE-2005-3981 due to its disputed nature and related concerns.