$ cve CVE-2005-0045 JSON

CVE-2005-0045 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 70.3% (pctl 99)

Patch early

A public exploit exists.

Description

The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the "Server Message Block Vulnerability," and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.

Scoring

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	70.28% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-05-02
Last modified	2026-06-16

Affected (4)

Vendor	Product
microsoft	windows 2000
microsoft	windows 2003 server
microsoft	windows nt
microsoft	windows xp

Public exploits

Source	Title	Date
exploit-db	Microsoft Windows - 'SMB' Transaction Response Handling (MS05-011)	2005-06-23

References

→ the Explorer · watch your stack · NVD