CVE-2005-3981

Published Dec 4, 2005

Last updated 3 months ago

Overview

Description: NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE
Source: cve@mitre.org
NVD status: Modified
CNA Tags: disputed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.9
Impact score: 6.9
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E545C63-FE9C-4CA1-AF0F-D999D84D2AFD"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "294EBA01-147B-4DA0-937E-ACBB655EDE53"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4E8B7346-F2AA-434C-A048-7463EC1BB117"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BE1A6107-DE00-4A1C-87FC-9E4015165B5B"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:enterprise:*:64-bit:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E69D0E21-8C62-403E-8097-2CA403CBBB1B"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:enterprise:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A86C732B-6E92-46FB-B1E5-F0BA2F0D6D82"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:r2:*:64-bit:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5D42E51C-740A-4441-8BAF-D073111B984C"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:r2:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C1BC59CF-BA8A-4D4C-92A5-CFDA7ECD685F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:standard:*:64-bit:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "74AD256D-4BCE-41FB-AD73-C5C63A59A06D"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:standard:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4B5F54BB-A80E-42F2-A700-82C1240E23D0"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:web:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B518E945-5FDE-4A37-878D-6946653C91F7"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:web:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "76BDFB16-D71F-4E33-83FD-F0F2AE2FAE7F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:home:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BC176BB0-1655-4BEA-A841-C4158167CC9B"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:media_center:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "403945FA-8676-4D98-B903-48452B46F48F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:gold:professional:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4BF263CB-4239-4DB0-867C-9069ED02CAD7"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:home:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "49693FA0-BF34-438B-AFF2-75ACC8A6D2E6"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp1:media_center:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6A05337E-18A5-4939-85A0-69583D9B5AD9"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:home:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E43BBC5A-057F-4BE2-B4BB-6791DDB0B9C1"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:media_center:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7E439FA5-78BF-41B1-BAEC-C1C94CE86F2E"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:tablet_pc:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB2BE2DE-7B06-47ED-A674-15D45448F357"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References