Vulnerability Details : CVE-2005-1983

Public exploit exists!
Stack-based buffer overflow in the Plug and Play (PnP) service for Microsoft Windows 2000 and Windows XP Service Pack 1 allows remote attackers to execute arbitrary code via a crafted packet, and local users to gain privileges via a malicious application, as exploited by the Zotob (aka Mytob) worm.
Published 2005-08-10 04:00:00
Updated 2018-10-12 21:36:48
Source Microsoft Corporation
View at NVD,   CVE.org
Vulnerability category: OverflowExecute code

Products affected by CVE-2005-1983

Exploit prediction scoring system (EPSS) score for CVE-2005-1983

EPSS FAQ
97.50%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 100 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2005-1983

  • MS05-039 Microsoft Plug and Play Service Overflow
    Disclosure Date: 2005-08-09
    First seen: 2020-04-26
    exploit/windows/smb/ms05_039_pnp
    This module exploits a stack buffer overflow in the Windows Plug and Play service. This vulnerability can be exploited on Windows 2000 without a valid user account. NOTE: Since the PnP service runs inside the service.exe process, a failed exploit attempt w

CVSS scores for CVE-2005-1983

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
10.0
 HIGH AV:N/AC:L/Au:N/C:C/I:C/A:C
10.0
10.0
 NIST

References for CVE-2005-1983

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close